WhatsApp: NSO Group Operates Pegasus Spyware for Customers

WhatsApp: NSO Group Operates Pegasus Spyware for Customers

November 18, 2024 at 05:40PM

Court documents reveal that Israel’s NSO Group may have more knowledge about the use of its Pegasus spyware than previously stated. WhatsApp claims NSO directly operated the spyware, misleading customers about their role. The lawsuit highlights NSO’s alleged misuse of WhatsApp’s servers and its responsible role in targeting individuals, including activists.

**Meeting Takeaways: NSO Group and WhatsApp Legal Dispute**

1. **NSO Group’s Operations**: Newly released court documents suggest NSO Group had significant control over the deployment and use of its Pegasus spyware, contradicting its claims of minimal involvement after sale.

2. **Direct Liability**: WhatsApp’s legal filings allege NSO Group is “solely responsible” for unauthorized access to its servers, asserting that the company operated the spyware on behalf of customers.

3. **Customer Role**: According to WhatsApp’s lawyers, customers of NSO Group had limited interaction with Pegasus, merely inputting target phone numbers for installation without further engagement in the process.

4. **Abuse of the Platform**: NSO Group is accused of repeatedly developing exploits to abuse WhatsApp servers for installing Pegasus, continuing such actions even after legal actions began against them.

5. **Controversial Use of Pegasus**: Pegasus is designed to monitor and extract data from mobile devices stealthily, including intercepting messages and tracking locations, raising concerns over its misuse, especially in authoritarian regimes.

6. **Blacklisting by the US**: The US government blacklisted NSO Group in 2021, severely limiting its operational scope within the US and in dealings with US entities.

7. **Legal Challenges**: NSO Group faces several lawsuits globally, and despite attempts to dismiss WhatsApp’s lawsuit, the company is fighting hard to maintain its case in court.

8. **Security Breaches**: WhatsApp alleges that NSO Group circumvented prevention measures, utilizing tools like WIS, Heaven, Eden, and Erised to facilitate Pegasus installations against their platform’s guidelines.

9. **Market Context**: The demand for spyware has surged, with NSO Group being part of a growing number of commercial spyware vendors targeting government clientele.

10. **Industry Concerns**: The increase in commercial spyware has raised alarms about privacy violations, particularly against journalists and activists in various countries, as highlighted by a significant database leak from 2021 revealing widespread targeting.

These points summarize the implications of the meeting discussions centered around the ongoing legal issues between WhatsApp and NSO Group, highlighting operational controversies, legal accountability, and the broader implications on privacy and security.

Full Article