WhatsApp Shuts Down Spyware Attack Targeting Regular Users
NSO Group allegedly continued attacking WhatsApp users despite court orders. Here's what families need to know and do right now.
Source
GetCyberRight Intelligence
Original headline: NSO Group WhatsApp Spyware Campaign Shutdown
Plain-English summary by GetCyberRight. Read the full report at the source above.
What Just Happened
WhatsApp recently shut down a sophisticated spear-phishing campaign allegedly operated by NSO Group, a company that sells spyware to governments. This matters because NSO Group is under a court injunction that specifically forbids them from targeting WhatsApp users. Yet they appear to have continued anyway, putting ordinary people at risk.
The Details
NSO Group creates powerful spyware called Pegasus that can secretly take over your phone. Once installed, it can read your messages, listen to calls, access photos, and track your location. The company claims they only sell to governments for fighting terrorism and crime.
In this latest attack, the company allegedly sent carefully crafted phishing messages to WhatsApp users. These messages looked legitimate but contained malicious links designed to install spyware. This type of targeted attack is called spear-phishing because attackers customize messages to trick specific people.
What makes this especially concerning is that NSO Group lost a lawsuit to WhatsApp in 2019. A court ordered them to stop targeting WhatsApp users entirely. This new campaign suggests they either violated that order or are using intermediaries to continue their operations. WhatsApp detected the attack and blocked it, but the incident reveals how persistent these threats remain.
Who Is Affected
While NSO Group typically targets high-profile individuals like journalists, activists, and political figures, these attacks can sweep up regular people too. If you communicate with someone who might be targeted, you could be caught in the surveillance net.
Families should pay attention because spear-phishing techniques trickle down. The methods used in sophisticated attacks eventually appear in common scams. Learning to spot these threats now protects you from future attacks that criminals will copy.
What You Should Do Right Now
Update WhatsApp immediately. Open your app store and install any available updates. Security patches often fix vulnerabilities before most people know they exist.
Stay one step ahead of scammers
Weekly cybersecurity briefings for families. No spam, just the threats that matter and what to do about them.
Enable two-step verification in WhatsApp. Go to Settings > Account > Two-step verification. This adds a PIN that blocks unauthorized access even if someone gets your verification code.
Be suspicious of unexpected messages with links. Even from known contacts. If a message feels odd or urgent, call the person directly to verify before clicking anything.
Check which devices are logged into your WhatsApp. Go to Settings > Linked Devices and remove anything you don't recognize. Someone with access could be reading your messages.
Review your phone's app permissions. Remove any apps you don't use and check what permissions your remaining apps have. No game needs access to your microphone or contacts.
The Bigger Picture
This incident highlights a troubling reality. Companies that create surveillance tools often operate in legal gray areas, and court orders don't always stop them. As spyware becomes more sophisticated and accessible, regular families face threats once reserved for government targets.
Staying informed isn't about living in fear. It's about building smart habits that protect your family's digital life. The same steps that defend against nation-state spyware also block everyday scammers.
How GetCyberRight Can Help
Our GCR Scam Guard tool helps you identify phishing messages and suspicious links before you click them. It works as a first line of defense, analyzing messages for common warning signs that even sophisticated attacks often contain. Think of it as a trusted second opinion that takes just seconds to consult. When threats evolve this quickly, having tools that keep pace makes all the difference for busy families.
Curated from trusted cybersecurity sources by GetCyberRight
Source: GetCyberRight IntelligenceStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles
Fake Banking App Updates Are Stealing Money Through Android Phones
Criminals are using fake banking app updates hosted on GitHub to install malware that steals financial data from Android phones.
4 min readFake Banking App Updates Are Installing Malware on Android Phones
A new malware called NFCShare is spreading through fake banking app updates. Here's how to protect your family's financial information.
3 min read
Silent Ransom: Criminals Are Walking Into Offices to Install Malware
A new attack called Silent Ransom combines phone scams with physical office break-ins. Law firms are the first targets, but any small business could be next.
3 min read
Critical Security Flaw in Check Point VPN Under Active Attack
A zero-day vulnerability in Check Point VPN has been exploited since early May, with ransomware groups using it to break into business networks.
3 min read