WhatsApp Says NSO-Linked Phishing Attempt Violated Court Order

· Original article ↗

Summary

WhatsApp says it detected an NSO-linked social-engineering attempt using malicious links, disabled test accounts and groups, and is seeking contempt proceedings over an alleged violation of a permanent injunction.

Key points

  • WhatsApp says it recently detected a social-engineering attempt that tried to trick users into clicking malicious links.
  • WhatsApp linked the attempt to NSO Group based on similarities to previously reported one-click phishing campaigns; the article does not independently verify the attribution.
  • WhatsApp says it detected attackers creating test accounts and groups, which have since been disabled.
  • WhatsApp says it is filing a federal court contempt action, alleging NSO violated a permanent injunction barring it from targeting WhatsApp users.
  • The article reports no confirmed user compromise from this attempt.
  • WhatsApp said it would contribute to the Spyware Accountability Initiative, which supports efforts to expose and stop spyware abuse.

Article Details

Event Type
WhatsApp-reported spear-phishing and social-engineering attack allegedly linked to NSO Group and in violation of a permanent injunction
Impact
The attack attempted to trick WhatsApp users into clicking malicious links. WhatsApp says it disabled test accounts and groups created by the attackers and is seeking a federal court contempt order against NSO Group. The article does not report confirmed successful infections or other user impact.

MITRE ATT&CK

Threat Actors

Vendors

Products

Related Articles