Judge finds spyware-maker NSO Group liable for attacks on WhatsApp users

A federal judge in California has agreed with WhatsApp that the NSO Group, the Israeli cybersurveillance firm behind the Pegasus spyware, had hacked into its systems by sending malware through its servers to thousands of its users' phones. WhatsApp and its parent company, Meta, sued the NSO Group back in 2019 and accused it of spreading malware to 1,400 mobile devices across 20 countries with surveillance as its purpose. They revealed back then some of the targeted phones were owned by journalists, human rights activists, prominent female leaders and political dissidents. The Washington Post reports that District Judge Phyllis Hamilton has granted WhatsApp's motion for summary judgement against NSO and has ruled that it had violated the US Computer Fraud and Abuse Act (CFAA). 

The NSO Group disputed the allegations in the "strongest possible terms" when the lawsuit was filed. It denied that it had a hand in the attacks and told Engadget back then that its sole purpose was to "provide technology to licensed government intelligence and law enforcement agencies to help them fight terrorism and serious crime." The company argued that it should not be held liable, because it merely sells its services to government agencies, which are the ones that determine their targets. In 2020, Meta escalated its lawsuit and accused the firm of using US-based servers to stage its Pegasus spyware attacks.

Judge Hamilton has ruled that the NSO Group violated the CFAA, because the firm appears to fully acknowledge that the modified WhatsApp program its clients use to target users send messages through legitimate WhatsApp servers. Those messages then allow the Pegasus spyware to be installed on users' devices — the targets don't even have to do anything, such as pick up the phone to take a call or click a link, to be infected. The court has also found that the plaintiff's motion for sanctions must be granted on account of the NSO Group "repeatedly [failing] to produce relevant discovery," most significant of which is the Pegasus source code. 

WhatsApp spokesperson Carl Woog told The Post that the company believes this is the first court decision agreeing that a major spyware vendor had broken US hacking laws. "We’re grateful for today’s decision," Woog told the publication. "NSO can no longer avoid accountability for their unlawful attacks on WhatsApp, journalists, human rights activists and civil society. With this ruling, spyware companies should be on notice that their illegal actions will not be tolerated." In her decision, Judge Hamilton wrote that her order resolves all issues regarding the NSO Group's liability and that a trial will only proceed to determine how much the company should pay in damages.  

This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/judge-finds-spyware-maker-nso-group-liable-for-attacks-on-whatsapp-users-140054522.html?src=rss https://www.engadget.com/cybersecurity/judge-finds-spyware-maker-nso-group-liable-for-attacks-on-whatsapp-users-140054522.html?src=rss
Creato 26d | 21 dic 2024, 15:40:13


Accedi per aggiungere un commento

Altri post in questo gruppo

Nintendo Switch 2 is official, with more details coming on April 2, 2025

The long wait is finally over. In a YouTube video with little fanfare, Nintendo officially introduced the long-awaited Switch 2. The first true next-gen follow-up to the original Switch includes ba

16 gen 2025, 15:30:17 | Engadget
'TikTok Refugees' are learning Mandarin Chinese on Duolingo for RedNote

In a few days, TikTok could be banned in the US, rendering the app unusable and removing it from app stores. Instead of making do with Instagram Reels, people looked for a closer alternative and fo

16 gen 2025, 15:30:16 | Engadget
A four pack of our favorite Bluetooth trackers for Android devices is cheaper than ever

Not to be cliché, but if losing things was an Olympic sport then I'd at least get a bronze. To that end, I rely on

16 gen 2025, 15:30:14 | Engadget
UK demands adult content sites introduce 'effective' age verification methods

The UK has spent over a decade attempting to regulate who can access adult content online and

16 gen 2025, 15:30:13 | Engadget
Insta360’s Flow Pro 2 gimbal offers a sturdier build and a selfie mirror

Insta360 is back with another smartphone gimbal and it looks pretty darn great. The Flow Pro 2 is an upgrade over its predecessor in nearly every major way,

16 gen 2025, 13:10:15 | Engadget
19 relaxing video games to help you destress

The last few years have brought a barrage of “cozy games,” video games expressly designed to generate good vibes. That said, coziness isn’t a virtue in and of itself. If you’re looking for games to

16 gen 2025, 10:50:03 | Engadget
Blue Origin’s New Glenn rocket launches into orbit on its maiden flight

Blue Origin's New Glenn rocket has successfully made it to space for its maiden flight, a few days after its planned January 13 launch was

16 gen 2025, 08:30:11 | Engadget