Meta says NSO Group again targeted WhatsApp users despite a court order barring it from doing so. WhatsApp said it disrupted NSO-linked social-engineering attempts involving malicious links that redirected targets to external websites, plus test accounts and groups on the platform, and published related domains and indicators of compromise. The report did not include victim counts, timing, or confirmation of successful compromises.
Why it matters: This matters because it suggests a spyware vendor accused of abusing messaging users may still be actively targeting people after a legal ban. WhatsApp users, journalists, activists, and high-risk targets should treat unsolicited links and unusual group invites with caution, and defenders should review the published indicators immediately.
Bruce Schneier
2026.06.10
96% relevant
This is the same underlying event: WhatsApp detecting renewed NSO-linked phishing targeting of its users despite an existing court order, adding an additional source noting the alleged violation and tying it to spyware activity.
Bill Toulas
2026.06.08
98% relevant
This article reports the same underlying event: WhatsApp/Meta says it disrupted new NSO-linked one-click phishing activity targeting WhatsApp users, including test accounts and groups, and names the suspected infrastructure domains used in the campaign.
2026.06.08
99% relevant
This article is a direct update on the same event: WhatsApp says NSO violated the court injunction by targeting users with spearphishing links and test accounts/groups, and that Meta is seeking a contempt order while sharing indicators of compromise.
Eduard Kovacs
2026.06.08
98% relevant
This article is a direct report on the same event: WhatsApp says it detected and disrupted an NSO-linked spear-phishing campaign using malicious links, disabled related test accounts and groups, and is seeking a federal contempt order for violating the permanent injunction barring NSO from targeting WhatsApp users.
2026.06.08
100% relevant
This article establishes a new trackable event: Meta's allegation of a fresh NSO-linked WhatsApp targeting campaign and its request that the court enforce the prior injunction through contempt proceedings.
← Back to all stories