WhatsApp Spyware Attack: What Families Need to Know Right Now
NSO Group is targeting WhatsApp users with spyware despite a court ban. Here's what happened and how to protect your family.
Source
GetCyberRight Intelligence
Original headline: NSO Group Spyware Campaign Targets WhatsApp Users
Plain-English summary by GetCyberRight. Read the full report at the source above.
What Just Happened
Meta has filed a legal complaint against NSO Group after catching the Israeli spyware company running a new attack campaign targeting WhatsApp users. This matters because NSO was already permanently banned from attacking WhatsApp by a U.S. court in 2019. The company appears to have violated that injunction by launching fresh attacks designed to install their powerful Pegasus spyware on people's phones.
The Details
NSO Group creates spyware called Pegasus that can secretly take over smartphones. Once installed, it can access your messages, photos, calls, and even turn on your camera and microphone without your knowledge. The company claims it only sells to governments for fighting terrorism and crime, but their tools have been used to spy on journalists, activists, and regular people.
In this latest campaign, NSO used spearphishing tactics to trick WhatsApp users. Spearphishing means sending messages that look legitimate but are designed to get you to click malicious links or download harmful files. These attacks often appear to come from someone you know or a trusted organization.
Meta discovered the new attacks through its security monitoring systems. The company immediately filed a contempt of court complaint because NSO was supposed to stop all WhatsApp attacks after losing their 2019 lawsuit. This violation shows that even court orders don't always stop determined attackers.
Who Is Affected
While NSO typically focuses on specific high-value targets like journalists and political figures, these campaigns can affect everyday WhatsApp users too. Attackers sometimes cast a wider net than intended, or family members of targets get caught in the crossfire.
If you or anyone in your household uses WhatsApp regularly, especially for work or community organizing, you should pay attention. The tactics used in these attacks can also appear in other scams and phishing attempts that affect everyone.
What You Should Do Right Now
Update WhatsApp immediately. Open your phone's app store and install any available WhatsApp updates. Security patches often fix vulnerabilities that spyware exploits.
Stay one step ahead of scammers
Weekly cybersecurity briefings for families. No spam, just the threats that matter and what to do about them.
Don't click links in unexpected WhatsApp messages. Even if a message appears to come from a contact, verify through another method (like calling them) before clicking anything suspicious.
Enable two-step verification in WhatsApp. Go to Settings > Account > Two-step verification and set up a PIN. This adds an extra security layer to your account.
Watch for unusual phone behavior. If your phone suddenly runs hot, drains battery quickly, or acts strange, it could indicate spyware. Consider having it checked by a professional.
Talk to your family about message safety. Make sure everyone in your household knows not to click suspicious links, even in apps they trust like WhatsApp.
The Bigger Picture
This incident reminds us that cybersecurity threats are constantly evolving, even when companies face legal consequences. Spyware makers continue developing new ways to bypass security measures and court restrictions. The tools governments use can also end up affecting regular families, which is why staying informed about these threats matters for everyone, not just activists or public figures.
How GetCyberRight Can Help
Our Cyber Threat Radar tool tracks emerging spyware campaigns and targeted attacks that could affect your family. It monitors developments like this NSO Group situation and translates complex security news into clear, actionable guidance. By staying connected with GetCyberRight, you'll get early warnings about threats before they become widespread problems in your community.
Curated from trusted cybersecurity sources by GetCyberRight
Source: GetCyberRight IntelligenceStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles
Fake Banking App Updates Are Stealing Money Through Android Phones
Criminals are using fake banking app updates hosted on GitHub to install malware that steals financial data from Android phones.
4 min readFake Banking App Updates Are Installing Malware on Android Phones
A new malware called NFCShare is spreading through fake banking app updates. Here's how to protect your family's financial information.
3 min read
Silent Ransom: Criminals Are Walking Into Offices to Install Malware
A new attack called Silent Ransom combines phone scams with physical office break-ins. Law firms are the first targets, but any small business could be next.
3 min read
Critical Security Flaw in Check Point VPN Under Active Attack
A zero-day vulnerability in Check Point VPN has been exploited since early May, with ransomware groups using it to break into business networks.
3 min read