WhatsApp Says NSO-Linked Phishing Attempt Violated Court Order

Summary
WhatsApp says it detected an NSO-linked social-engineering attempt using malicious links, disabled test accounts and groups, and is seeking contempt proceedings over an alleged violation of a permanent injunction.
Key points
- WhatsApp says it recently detected a social-engineering attempt that tried to trick users into clicking malicious links.
- WhatsApp linked the attempt to NSO Group based on similarities to previously reported one-click phishing campaigns; the article does not independently verify the attribution.
- WhatsApp says it detected attackers creating test accounts and groups, which have since been disabled.
- WhatsApp says it is filing a federal court contempt action, alleging NSO violated a permanent injunction barring it from targeting WhatsApp users.
- The article reports no confirmed user compromise from this attempt.
- WhatsApp said it would contribute to the Spyware Accountability Initiative, which supports efforts to expose and stop spyware abuse.
Article Details
- Event Type
- WhatsApp-reported spear-phishing and social-engineering attack allegedly linked to NSO Group and in violation of a permanent injunction
- Impact
- The attack attempted to trick WhatsApp users into clicking malicious links. WhatsApp says it disabled test accounts and groups created by the attackers and is seeking a federal court contempt order against NSO Group. The article does not report confirmed successful infections or other user impact.
