NSO Group Caught Violating Court Order With WhatsApp Spyware Attack
Meta discovered NSO Group running a new WhatsApp phishing campaign despite being banned from targeting the app's users. Here's what families need to know.
Source
GetCyberRight Intelligence
Original headline: NSO Group Caught in New WhatsApp Phishing Attack
Plain-English summary by GetCyberRight. Read the full report at the source above.
What Happened
Meta recently caught NSO Group, the company behind the infamous Pegasus spyware, running a fresh phishing campaign targeting WhatsApp users. This happened even though a court previously banned NSO Group from going after WhatsApp users. The discovery means this surveillance company ignored legal orders and put everyday people at risk again.
The Details
NSO Group creates spyware called Pegasus that governments buy to monitor people's phones. Once installed, Pegasus can read your messages, listen to calls, track your location, and even turn on your camera without you knowing. It's some of the most invasive surveillance technology available.
This new attack used phishing messages sent through WhatsApp itself. Users received suspicious links designed to trick them into installing the spyware. What makes this particularly serious is that NSO Group was already under a court injunction specifically preventing them from targeting WhatsApp users. Meta filed a lawsuit against NSO Group back in 2019 for previous attacks, and the company agreed to stop. This new campaign shows they violated that agreement.
The good news is that Meta detected and blocked this campaign before it could spread widely. However, the fact that it happened at all shows how persistent these threats are, even when companies face legal consequences.
Who Is Affected
While NSO Group typically targets journalists, activists, and political figures, their attacks can affect anyone. Phishing campaigns often cast wide nets before narrowing down to specific targets. If you use WhatsApp, you could potentially receive one of these malicious messages.
Families should pay special attention because these attacks don't always look obviously suspicious. The messages might appear to come from someone you know or a trusted organization. Teens and older family members are especially vulnerable because they may not recognize the warning signs of a phishing attempt.
What You Should Do Right Now
Update WhatsApp immediately. Go to your app store and install the latest version. Meta includes security patches that protect against known threats.
Stay one step ahead of scammers
Weekly cybersecurity briefings for families. No spam, just the threats that matter and what to do about them.
Be suspicious of unexpected links in WhatsApp messages. Even if they appear to come from contacts, verify through another communication method before clicking anything.
Enable two-step verification in WhatsApp. Go to Settings > Account > Two-step verification. This adds an extra security layer to your account.
Check your WhatsApp privacy settings. Navigate to Settings > Privacy and review who can see your profile photo, status, and last seen information. Limit these to contacts only.
Report suspicious messages directly in WhatsApp. Long press the message, tap "Report" to help Meta identify and block threats faster.
The Bigger Picture
This incident reminds us that even court orders and legal consequences don't always stop determined attackers. Spyware companies continue operating in a legal gray area, selling powerful surveillance tools that can end up misused. For families, the lesson is clear: staying informed and maintaining good security habits matters more than ever. These threats aren't just for high-profile targets anymore.
How GetCyberRight Can Help
Our GCR Scam Guard tool analyzes suspicious links before you click them, detecting phishing attempts and malicious redirects just like the ones used in this WhatsApp attack. Instead of guessing whether a link is safe, you can check it first. It's one simple step that can protect your entire family from spyware, scams, and other online threats. When companies like NSO Group ignore court orders, tools like this become your first line of defense.
Curated from trusted cybersecurity sources by GetCyberRight
Source: GetCyberRight IntelligenceStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles
Fake Banking App Updates Are Stealing Money Through Android Phones
Criminals are using fake banking app updates hosted on GitHub to install malware that steals financial data from Android phones.
4 min readFake Banking App Updates Are Installing Malware on Android Phones
A new malware called NFCShare is spreading through fake banking app updates. Here's how to protect your family's financial information.
3 min read
Silent Ransom: Criminals Are Walking Into Offices to Install Malware
A new attack called Silent Ransom combines phone scams with physical office break-ins. Law firms are the first targets, but any small business could be next.
3 min read
Critical Security Flaw in Check Point VPN Under Active Attack
A zero-day vulnerability in Check Point VPN has been exploited since early May, with ransomware groups using it to break into business networks.
3 min read