<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/whatsapp-says-it-disrupted-new-nso-spyware-phishing-attacks-rs77n5mnn" -->

---
title: WhatsApp says it disrupted new NSO spyware phishing attacks
description: WhatsApp detected and disrupted spear-phishing campaigns allegedly run by NSO Group, the Israeli spyware vendor behind Pegasus. Attackers attempted to trick...
canonical: https://daily.dev/posts/whatsapp-says-it-disrupted-new-nso-spyware-phishing-attacks-rs77n5mnn
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: WhatsApp says it disrupted new NSO spyware phishing attacks | daily.dev
og:description: WhatsApp detected and disrupted spear-phishing campaigns allegedly run by NSO Group, the Israeli spyware vendor behind Pegasus. Attackers attempted to trick...
og:url: https://daily.dev/posts/whatsapp-says-it-disrupted-new-nso-spyware-phishing-attacks-rs77n5mnn
og:image: https://api.daily.dev/og/posts/RS77N5MNN.png
og:image:alt: WhatsApp says it disrupted new NSO spyware phishing attacks
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# WhatsApp says it disrupted new NSO spyware phishing attacks

**[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments

## Summary

WhatsApp detected and disrupted spear-phishing campaigns allegedly run by NSO Group, the Israeli spyware vendor behind Pegasus. Attackers attempted to trick users into clicking malicious links redirecting to external sites, and also created test accounts and groups that were taken down. Meta shared three IOC domains linked to the attacks. The activity allegedly violates a 2025 permanent injunction against NSO Group stemming from a lawsuit that resulted in a $167M fine and liability declaration for 1,400 infections. Meta recommends users keep apps updated, and highlights Android Advanced Protection and iOS Lockdown Mode as additional defenses against commercial spyware.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.bleepingcomputer.com/news/security/whatsapp-says-it-disrupted-new-nso-spyware-phishing-attacks>

## Similar posts on daily.dev

- [Meta drags NSO back to court over WhatsApp spyware](https://daily.dev/posts/meta-drags-nso-back-to-court-over-whatsapp-spyware-rnfhis4xj) · The Next Web · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#phishing](https://daily.dev/tags/phishing)

[View this post on daily.dev](https://daily.dev/posts/whatsapp-says-it-disrupted-new-nso-spyware-phishing-attacks-rs77n5mnn)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"WhatsApp says it disrupted new NSO spyware phishing attacks","url":"https://daily.dev/posts/whatsapp-says-it-disrupted-new-nso-spyware-phishing-attacks-rs77n5mnn","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/whatsapp-says-it-disrupted-new-nso-spyware-phishing-attacks-rs77n5mnn"},"datePublished":"2026-06-08T18:41:49.146Z","dateModified":"2026-06-10T11:12:16.418Z","description":"WhatsApp detected and disrupted spear-phishing campaigns allegedly run by NSO Group, the Israeli spyware vendor behind Pegasus. Attackers attempted to trick...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f19e48ce24ebc43c297c63990ca15e71?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f19e48ce24ebc43c297c63990ca15e71?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/whatsapp-says-it-disrupted-new-nso-spyware-phishing-attacks-rs77n5mnn","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,phishing","timeRequired":"PT3M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"WhatsApp says it disrupted new NSO spyware phishing attacks"}]}
```

