Meta takes NSO to court again over spyware related to WhatsApp.

      Meta believed it had put an end to the activities of NSO Group, but claims the spyware firm did not get the message. The company is now seeking a contempt order from a federal court against NSO, the Israeli developer of the Pegasus hacking tool, alleging that it has violated a permanent injunction prohibiting it from targeting WhatsApp or its users.

      According to Meta, it has successfully disrupted new attacks, which involved spear-phishing attempts tied to NSO, by dismantling test accounts and groups that the firm had established on the platform. These attempts were similar to NSO’s previous “1-click” campaigns, characterized by an attack that allows a device to be compromised with just a single tap on a malicious link, without the need for a password. The links were crafted to entice WhatsApp users to visit external sites. NSO has not responded to a request for comment.

      This development is the latest chapter in a protracted conflict between the two companies. Last year, a US court mandated NSO to cease targeting WhatsApp, a ruling the spyware firm cautioned could jeopardize its existence. The judge significantly reduced the punitive damages NSO owed to Meta from an initial $167 million to $4 million, but the injunction—an order to stop—was the most critical aspect.

      Meta’s contempt filing contends that NSO has disregarded this injunction. NSO is currently appealing the injunction, and Meta is not facing this challenge alone. Last month, twelve civil rights organizations, along with security researchers, privacy advocates, and digital rights specialists, submitted amicus briefs supporting Meta in the appeal. The case has evolved into a broader issue regarding whether a company blacklisted by the US government, accused of facilitating human rights violations through Pegasus, can be compelled to cease its operations.

      For Meta, the situation has significant implications for its reputation. In recent years, it has worked to position WhatsApp as a privacy-centric platform and has implemented new protections against scams, all while managing its own security setbacks and a multitude of unrelated lawsuits. A messaging app trusted by over two billion users cannot afford to appear vulnerable to commercial spyware.

      What complicates the shutdown of the spyware industry is exactly what Meta is currently challenging in court: even a clear legal ruling might not deter a committed vendor, merely increasing the risks associated with getting caught. Meta’s intent, as demonstrated through the contempt filing and its announcement of thwarted attacks, is to continue exposing and capturing such activities.