WhatsApp says NSO Group violated court ban with new spyware campaign

WhatsApp has told a US court that NSO Group launched new spyware attacks against its users, allegedly violating a permanent injunction handed down earlier this year. The messaging platform, owned by Meta, disclosed the phishing campaign in a recent filing, marking the latest chapter in a years-long legal fight between the tech giant and the Israeli surveillance vendor.

The timing is notable. NSO Group was already under a court order prohibiting it from using WhatsApp's services or infrastructure after a 2019 lawsuit alleged the company had exploited a vulnerability to install its Pegasus spyware on roughly 1,400 devices. That case resulted in a permanent ban. WhatsApp now argues that NSO has breached those terms, running a fresh operation that targeted users through phishing tactics designed to deliver the same surveillance tools.

NSO Group has long maintained that it sells its software exclusively to government clients for lawful intelligence and law enforcement purposes. But the company has faced mounting scrutiny as reports have surfaced linking Pegasus to the targeting of journalists, activists, and political opponents in multiple countries. The US government placed NSO on a trade blacklist in 2021, and the company has wrestled with financial stress and ownership changes in the years since.

For stewards, the story is less about one vendor's legal exposure and more about the durability of the commercial spyware market. Demand for these tools remains strong among state actors, and enforcement mechanisms—whether through courts, export controls, or platform defenses—have not yet succeeded in shutting down supply. WhatsApp's disclosure suggests that even companies under legal restriction continue to find ways to operate, and that the infrastructure supporting state surveillance is more resilient than the headlines imply.

The consumer angle is trust. Messaging platforms have spent years pitching end-to-end encryption as a moat against both criminals and governments. Each new spyware case tests that promise and forces users to weigh the gap between technical security and real-world adversaries with resources. Watch whether this latest allegation prompts any regulatory response in jurisdictions where NSO's clients operate, and whether other platforms begin disclosing similar interdictions. The market for surveillance is not going away; it is going quiet.