In a major development, a US federal court has directed Israeli spyware maker NSO Group to stop using or targeting WhatsApp and Meta systems, while also reducing the damages sought by Meta. The ruling marks a significant step in curbing unauthorized surveillance and protecting digital privacy across global communication platforms.
Background of the Case
The case dates back to October 2019, when Meta (then Facebook) filed a lawsuit against NSO Group, accusing it of using its notorious Pegasus spyware to hack into 1,400 WhatsApp accounts in over 20 countries. Victims included journalists, human rights defenders, government officials, and diplomats.
Meta alleged that NSO exploited a vulnerability in WhatsApp’s calling system, allowing Pegasus to be secretly installed on devices even if users didn’t answer the call. Once installed, Pegasus could access private messages, photos, and activate cameras or microphones — all without user consent.
Court’s Judgment
The US District Court for the Northern District of California found that NSO Group had violated US federal and state laws, including the Computer Fraud and Abuse Act (CFAA). The court issued a permanent injunction, prohibiting NSO from accessing or attempting to access Meta’s servers, services, or systems.
However, while Meta initially sought substantial monetary damages, the court reduced the compensation, citing jurisdictional limits and lack of quantifiable harm for each instance. Despite this reduction, the judgment is considered a strong deterrent against future misuse of communication platforms.
NSO Group’s Defense
NSO Group has long maintained that it sells Pegasus only to government agencies for lawful purposes like counterterrorism and crime prevention. Yet, evidence from independent research organizations such as Citizen Lab and Amnesty International revealed instances of Pegasus being used to spy on journalists, activists, and opposition members, rather than criminals or terrorists.
The court’s latest order is being hailed as a landmark precedent reinforcing that private companies cannot use or help others misuse US-based digital infrastructure for surveillance.
Impact on Users and Tech Policy
This decision highlights the growing need for strict regulation of spyware tools and greater accountability in cyberspace. It also underscores the importance of end-to-end encryption and frequent security updates for users worldwide.
For WhatsApp and Meta, the ruling boosts their ongoing efforts to safeguard communication privacy and rebuild public trust in digital platforms.
FAQs
1. What is NSO Group?
NSO Group is an Israeli technology company known for developing Pegasus, a powerful spyware tool that can infiltrate smartphones and extract sensitive data.
2. What is Pegasus spyware used for?
Pegasus is marketed for use by government agencies to track criminals or terrorists, but investigations have revealed its misuse against journalists, activists, and politicians.
3. Why did Meta sue NSO Group?
Meta accused NSO of illegally using WhatsApp servers to deploy spyware on the phones of over 1,400 users, violating US laws and Meta’s terms of service.
4. What did the US court order?
The court ordered NSO Group to stop using or targeting WhatsApp and Meta’s infrastructure, and to refrain from any similar actions in the future. Damages claimed by Meta were also reduced.
5. Does this mean Pegasus is banned?
Not entirely. The ruling doesn’t ban Pegasus globally, but it prevents NSO from exploiting or accessing WhatsApp and Meta’s systems within the jurisdiction of US law.
6. How does this affect WhatsApp users?
The decision strengthens WhatsApp’s legal and technical protection against spyware attacks, ensuring safer communication for users.
7. Why were damages reduced?
The court reduced financial damages due to jurisdictional and evidentiary factors but upheld a strong injunction as a preventive measure.
Conclusion
The verdict represents a milestone in the battle for digital privacy, reaffirming that no company is above accountability when it comes to user data protection. While monetary penalties were lowered, the injunction stands as a major win for digital rights, setting a global precedent against unlawful cyber surveillance.

Leave a comment