NSO Group Caught Attacking WhatsApp Users Again Despite Court Ban
Meta detected NSO Group running new Pegasus spyware attacks on WhatsApp users, violating a permanent court order. Here's what families need to know right now.
Source
GetCyberRight Intelligence
Original headline: WhatsApp Catches NSO Spyware Attacks Despite Court Ban
Plain-English summary by GetCyberRight. Read the full report at the source above.
What Happened
Meta just caught NSO Group, an Israeli spyware company, launching fresh attacks on WhatsApp users with their notorious Pegasus spyware. This is happening despite a permanent court injunction specifically ordering NSO to stop targeting WhatsApp. Meta is now filing contempt of court charges against the company.
The Details
NSO Group makes Pegasus, a powerful spyware tool that can secretly access everything on your phone. It can read your messages, listen through your microphone, track your location, and access your photos without you knowing. The company claims they only sell to governments for tracking criminals and terrorists.
In 2019, Meta sued NSO Group after discovering they were exploiting WhatsApp to infect phones. The case ended with a permanent injunction: NSO was banned from ever accessing WhatsApp, Instagram, Facebook, or any Meta services again. But Meta's security team just detected a new phishing campaign trying to trick WhatsApp users into clicking malicious links that install Pegasus spyware.
This new attack uses fake websites and messages designed to look legitimate. When someone clicks these links, their phone can become completely compromised. What makes this especially concerning is the brazenness: NSO is violating a court order, suggesting they believe the value of their surveillance operations outweighs legal consequences.
Who Is Affected
While NSO claims they only target serious criminals, past investigations have revealed journalists, human rights activists, political dissidents, and even family members of targeted individuals have been infected. If you use WhatsApp, particularly if you work in journalism, activism, law, or have family in politically sensitive regions, you should pay extra attention.
Everyday families aren't typically NSO's primary targets. However, phishing campaigns can spread beyond intended victims. Anyone can accidentally click a convincing fake link, which is why understanding these threats matters for everyone.
What You Should Do Right Now
Update WhatsApp immediately. Open your phone's app store and install any available WhatsApp updates. These updates contain security patches that protect against known exploits.
Stay one step ahead of scammers
Weekly cybersecurity briefings for families. No spam, just the threats that matter and what to do about them.
Never click links in unexpected WhatsApp messages, even from known contacts. If a friend sends a strange link, call them to verify they actually sent it before clicking.
Enable two-step verification in WhatsApp. Go to Settings > Account > Two-step verification and create a PIN. This adds protection to your account.
Review which apps have access to your microphone and camera. On iPhone: Settings > Privacy & Security. On Android: Settings > Privacy. Remove access for apps you don't actively use.
Restart your phone weekly. This simple habit can interrupt certain types of spyware that don't survive a reboot.
The Bigger Picture
This incident reveals a troubling trend: spyware companies are becoming bolder, even when courts try to stop them. The global spyware industry operates with limited oversight, and tools designed for government surveillance regularly get misused. For families, this means the threats we face online are increasingly sophisticated. Staying informed isn't paranoia. It's responsible digital citizenship in 2025.
How GetCyberRight Can Help
Our Cyber Threat Radar tool tracks active spyware campaigns and phishing threats targeting messaging apps like WhatsApp in real-time. It translates complex threat intelligence into plain English alerts that help families understand what's happening and what to do about it. Think of it as your early warning system for digital threats that actually matter to your household.
Curated from trusted cybersecurity sources by GetCyberRight
Source: GetCyberRight IntelligenceStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles
Fake Banking App Updates Are Stealing Money Through Android Phones
Criminals are using fake banking app updates hosted on GitHub to install malware that steals financial data from Android phones.
4 min readFake Banking App Updates Are Installing Malware on Android Phones
A new malware called NFCShare is spreading through fake banking app updates. Here's how to protect your family's financial information.
3 min read
Silent Ransom: Criminals Are Walking Into Offices to Install Malware
A new attack called Silent Ransom combines phone scams with physical office break-ins. Law firms are the first targets, but any small business could be next.
3 min read
Critical Security Flaw in Check Point VPN Under Active Attack
A zero-day vulnerability in Check Point VPN has been exploited since early May, with ransomware groups using it to break into business networks.
3 min read