WhatsApp disrupted a new spear phishing campaign linked to NSO Group, in which attackers attempted to trick users into clicking malicious links to infect their devices with Pegasus spyware. WhatsApp alleges this violates a permanent court injunction issued last year barring NSO from targeting WhatsApp users, and has filed a contempt motion. The campaign mirrors a 2024 Pegasus phishing operation reported in Jordan. This follows a years-long legal battle that resulted in a $167 million jury verdict against NSO (later reduced to $4 million). NSO was acquired by U.S. investors in 2025 who are lobbying to have the company removed from the U.S. Commerce Department blocklist, though it remains listed.
1 Impression