Meta Files Contempt Complaint, Says NSO Group Defied WhatsApp Injunction

Summary
Meta says it disrupted an NSO Group-linked spearphishing campaign on WhatsApp and filed a contempt complaint alleging the spyware maker violated an injunction barring it from targeting WhatsApp users.
Key points
- Meta says the campaign used malicious links to direct targets to external websites.
- Meta says it removed test accounts and WhatsApp groups associated with the activity.
- The company alleges NSO Group violated a permanent injunction barring it from targeting WhatsApp users.
- Meta said the campaign resembled spyware infections that affected journalists and activists in Jordan from 2019 to 2023.
- NSO Group did not respond to requests for comment; the allegations have not been independently confirmed in the article.
- Meta and Citizen Lab researcher John Scott-Railton argued NSO Group should remain on the U.S. Entity List.
Article Details
- Event Type
- Alleged spyware-linked spearphishing campaign and contempt-of-court complaint
- Impact
- Meta said it disrupted social-engineering attempts linked to NSO Group, removed test accounts and WhatsApp groups, and filed a contempt-of-court complaint alleging violations of a permanent injunction against targeting WhatsApp users. Meta said the campaign used malicious links to direct victims to external websites. NSO Group did not respond to requests for comment. Meta had previously won a civil case against NSO Group and was awarded $168 million in damages; NSO Group was appealing the ruling.
MITRE ATT&CK
People
Threat Actors
Malware
Vendors
MetaMeta said it disrupted a spearphishing campaign linked to NSO Group and filed a contempt-of-court complaint after alleging the company violated a permanent injunction against targeting WhatsApp users.NSO GroupMeta said it disrupted a spearphishing campaign linked to NSO Group and filed a contempt-of-court complaint after alleging the company violated a permanent injunction against targeting WhatsApp users.
