Key Takeaways
- WhatsApp’s parent company has filed a contempt motion in federal court alleging NSO Group violated a permanent ban on targeting its platform.
- The social media giant disrupted recent phishing campaigns reportedly connected to NSO that attempted to redirect users to harmful websites.
- The Israeli surveillance firm has been placed on a U.S. blacklist due to concerns about national security and foreign policy.
- NSO was previously ordered by a federal judge to cease all operations against WhatsApp, with the company claiming such restrictions could end its business.
- The tech giant removed test profiles and groups allegedly established by NSO on its services, with backing from a dozen civil liberties groups in the ongoing legal dispute.
On Monday, Meta Platforms initiated a contempt action in federal court against NSO Group, claiming the Israeli surveillance technology company breached a permanent court order that prohibited it from attacking WhatsApp and its user base.
META shares were hovering around $692 when the announcement was made public.
This legal maneuver intensifies an ongoing courtroom confrontation that previously delivered a significant victory for the technology giant. Last year, a federal judge ruled that NSO must pay $4 million in compensation — down from an originally sought $167 million — and issued a permanent order forbidding the company from targeting WhatsApp.
However, according to Meta, NSO allegedly continued its activities despite the prohibition.
WhatsApp’s security teams uncovered fresh “spear phishing” operations connected to NSO in the past several weeks. These coordinated efforts sought to manipulate users into accessing malicious URLs that would send them to external domains — a technique the company characterizes as a “1-click phishing” assault, where a single interaction can infect a device or compromise an account without requiring any credential input.
The company stated that WhatsApp discovered and eliminated test profiles and groups that NSO had purportedly established on its platform. NSO Group has not issued a statement in response to media inquiries.
Details of the Phishing Campaigns
The attack methodology resembled earlier operations attributed to NSO. Targets received malicious URLs; a single click could potentially deploy surveillance tools without requiring passwords or authentication credentials.
Pegasus, NSO’s primary commercial product, remains central to the allegations. Meta and WhatsApp have previously charged NSO with exploiting a WhatsApp security flaw to deploy Pegasus on over 1,400 devices worldwide. Among those reportedly surveilled were members of the media, government personnel, and humanitarian organization workers.
U.S. authorities have added NSO Group to a trade blacklist, referencing operations that conflict with American national security objectives and foreign policy goals. NSO has previously stated that the court’s permanent prohibition could effectively force it to cease operations entirely.
Civil Rights Groups Rally Behind Meta’s Legal Battle
Last month, a coalition of 12 civil liberties organizations joined Meta’s effort to oppose NSO’s appeal of the permanent order. This alliance comprises cybersecurity researchers, privacy protection groups, and digital rights specialists who submitted amicus curiae briefs supporting Meta’s legal position.
Meta has characterized commercial spyware as a “national security threat” and emphasized that individual companies cannot effectively combat surveillance-for-hire operations without broader support.
The contempt motion represents Meta’s newest effort to uphold the judicial ruling and prevent NSO from conducting operations across its family of platforms. The matter will now proceed through the federal court system.





