Israeli spyware firm accused of targeting WhatsApp despite court ban
WhatsApp has reported that it recently detected and disrupted a hacking attempt linked to the Israeli spyware company NSO Group, despite an existing court order that prohibits the firm from targeting WhatsApp users.
The Meta-owned messaging platform said the activity appears to breach a permanent injunction issued by a U.S. court. Meta has now asked the court to hold NSO accountable for the alleged violation.
How the alleged attack worked
According to WhatsApp, attackers used social engineering tactics to trick users into clicking malicious links sent through messages.
Once clicked, the links redirected users to external websites, which could potentially be used to compromise devices. The company said the method is similar to previously identified spyware campaigns associated with NSO Group, where a single click may be enough to expose a device to intrusion.
WhatsApp also said it identified and removed test accounts and groups that were being used in connection with the activity.
Legal background and court dispute
WhatsApp filed a lawsuit against NSO Group in 2019 after a vulnerability was allegedly used to deploy spyware against its users.
In later court proceedings, NSO was found liable, and damages were awarded. A judge also issued a permanent injunction banning NSO from targeting WhatsApp users. The company is now seeking to enforce that order after the latest allegations.
NSO Group has previously denied wrongdoing and has challenged legal restrictions placed against it.
Security concerns and user guidance
WhatsApp emphasized that it continues to rely on end-to-end encryption to protect private messages and calls by default.
The company advised users to keep their apps updated, avoid suspicious links, and enable stronger security settings where possible, especially for individuals who may be at higher risk of targeted cyberattacks.
Meta also highlighted ongoing efforts to support initiatives aimed at researching spyware threats and improving digital security globally.
