Meta Sanctions NSO
- After a six-year legal battle, a California court has ordered NSO Group, the creator of the Pegasus spyware, to pay $167 million in damages for compromising whatsapp's infrastructure.
- The legal saga began in 2019 when Meta filed a lawsuit against NSO following the discovery of a vulnerability by Citizen Lab.
- The spyware could activate a user's camera and microphone, access emails and text messages, and track location data.
NSO Group Ordered to Pay $167 Million in WhatsApp Hacking Case
After a six-year legal battle, a California court has ordered NSO Group, the creator of the Pegasus spyware, to pay $167 million in damages for compromising whatsapp’s infrastructure. this marks the first time the Israeli company has been held financially liable for its alleged cyberattacks.
the Genesis of the Legal Dispute
The legal saga began in 2019 when Meta filed a lawsuit against NSO following the discovery of a vulnerability by Citizen Lab. This vulnerability reportedly allowed the installation of the Pegasus spyware, enabling unauthorized access to user devices.
The spyware could activate a user’s camera and microphone, access emails and text messages, and track location data. Approximately 1,400 WhatsApp users, including journalists, politicians, activists, and dissidents, were allegedly targeted.
Landmark Ruling Against NSO Group
A California federal jury reached a verdict, holding the Israeli firm accountable for the attacks. The judgment awards Meta $444,719 in damages, with an additional $167 million specifically related to the WhatsApp breach. This represents a meaningful legal precedent in the ongoing NSO Group controversy.
in January 2025, a judge in the Northern California District Court had already determined that NSO violated both federal and California hacking laws, as well as WhatsApp’s terms of service. The jury’s role was solely to determine the financial compensation.
Meta’s Response and future Plans
Despite the ruling, Meta tempered expectations. In a press release, the company acknowledged the challenges ahead, stating, “the path will be long to obtain the damages granted by NSO and we intend to achieve it.”
Meta indicated that the awarded funds woudl be donated to organizations dedicated to defending digital rights and protecting citizens from similar attacks worldwide. The company also aims to secure a court order preventing NSO from targeting WhatsApp in the future.
Meta also highlighted its Bug Bounty program, which encourages security researchers to report vulnerabilities to ensure prompt resolution and enhanced user protection across its platforms.