WhatsApp Seeks Contempt Order Against NSO Over Alleged Phishing Attacks
Summary
WhatsApp says NSO Group used social engineering and malicious links to target users despite a court injunction. WhatsApp is seeking a contempt order and says it removed NSO-related test accounts and groups.
Key points
- WhatsApp alleges NSO Group violated an October court injunction barring it from targeting users through the messaging app.
- The alleged attacks used social engineering to lure people to malicious websites outside WhatsApp.
- WhatsApp says it detected the activity after users reported suspicious behavior.
- WhatsApp is asking a federal court to hold NSO in contempt of the injunction.
- WhatsApp says it removed NSO-related test accounts and groups and shared threat indicators.
- NSO’s appeal of the injunction is ongoing; the company did not immediately respond to a request for comment.
Article Details
- Event Type
- WhatsApp alleges NSO Group used spearphishing and social engineering against its users in violation of a court injunction.
- Impact
- WhatsApp says users were lured toward malicious external websites and that it detected the activity after users reported suspicious behavior. WhatsApp removed NSO-related test accounts and groups and is asking a federal court to hold NSO in contempt. The reported attacks are allegations; the article does not provide specific threat indicators.
MITRE ATT&CK
Threat Actors
Vendors
MetaThe Meta-owned messaging app detected the attacks after users reported suspicious activity, according to a Meta blog post.NSO GroupWhatsApp accused NSO Group of using spearphishing and social engineering attacks against its users in violation of a court-ordered ban on targeting the messaging app.