NSO permanently barred from targeting WhatsApp users with Pegasus spyware

In a significant legal decision, a federal judge has mandated that NSO Group, the developer of the controversial Pegasus spyware, must cease all operations targeting WhatsApp users. This ruling, delivered by Judge Phyllis J. Hamilton of the U.S. District Court for Northern California, represents a permanent injunction that aligns with a legal action initiated by Meta, the parent company of WhatsApp, back in 2019. The lawsuit accused NSO of attempting to secretly compromise the devices of approximately 1,400 individuals, including journalists, lawyers, human rights advocates, and political activists. NSO allegedly employed deceptive tactics, such as creating counterfeit WhatsApp accounts, to infiltrate Meta's systems and infect targeted users with Pegasus. In her ruling, Judge Hamilton has not only prohibited NSO from continuing these intrusive practices but also ordered the firm to erase any data it had collected from WhatsApp users during its operations. This decision emphasizes the importance of user data protection, particularly given that WhatsApp employs end-to-end encryption for its messages, utilizing the open-source Signal Protocol. NSO had contended that such a ruling could jeopardize its business, as Pegasus is considered its flagship offering. However, Judge Hamilton determined that the threat posed by Pegasus to Meta significantly outweighed NSO's business interests. She articulated that any unauthorized access to personal information is not just a matter of reputation but directly harms the business model of companies like WhatsApp, which fundamentally sell privacy and security. The court's ruling underscores a crucial stance on privacy rights and the responsibilities of companies handling sensitive user data, aiming to uphold the integrity of digital communications against unauthorized surveillance.