The Israeli company behind Pegasus spyware has been ordered to pay $167 million to WhatsApp for hacking 1,400 individuals in 2019. Pegasus is a malicious software that can be remotely installed on mobile phones to access personal data, including microphones and cameras.
NSO Group, the company selling the technology, has faced accusations of allowing authoritarian governments to spy on journalists, activists, and political figures. Meta, the owner of WhatsApp, hailed this as a “first victory” against illegal spyware development and use.
NSO stated it would “carefully examine” the verdict and pursue further legal action, including an appeal. This marks the first time a spyware developer has been held accountable for exploiting smartphone platform vulnerabilities.
NSO Group insists the technology is intended solely for use against serious criminals and terrorists, though accusations have emerged that some nations have used it to target those considered national security threats.
The Pegasus scandal became public in 2021 when a list of 50,000 suspected hacking victims’ phone numbers was leaked to the media. This list included politicians, business executives, activists, royal family members, and over 180 journalists.
Reports suggest that devices belonging to UK officials, including those from Downing Street and the Foreign Office, were infected. Other prominent individuals believed to have been targeted include French President Emmanuel Macron and relatives of Jamal Khashoggi, the murdered Saudi journalist.
In addition to the $167 million penalty, NSO has been ordered to pay Meta $444,000 in damages. This comes after a six-year legal battle between Meta and the Israeli firm. Meta praised the decision, emphasizing that it would act as a deterrent against malicious spyware activities targeting American companies.
NSO, in its defense, claimed its technology is used responsibly by authorized government agencies to combat crime and terrorism. WhatsApp’s victory could pave the way for other tech giants to take legal action against NSO for targeting their platforms with Pegasus spyware.