NSO Group's Pegasus Spyware Hackers Snoop on WhatsApp Users, Faces Million-Dollar Fine
- By Malte Mansholt
- 2-Min Read
Hackers Implicated in WhatsApp Interception now Face Massive Penalties - Hackers gain access to WhatsApp, now demanding huge financial compensation.
In a major blow to the Israeli hacking firm, the NSO Group, a California jury has demanded they pay a hefty sum of $167.25 million to Meta, the parent company of WhatsApp, for hacking into the messaging app and spying on thousands of users.
The court decision, announced on Tuesday, includes $444,719 in damages, with the rest serving as a penalty. Meta took the NSO Group to court after discovering their unlawful activities. The NSO Group, acting on behalf of clients, had breached the privacy of more than 1,400 WhatsApp users, including journalists, human rights activists, and government critics.
Eavesdropping Unbeknownst to Users
The affected users remained oblivious to the attack, as the NSO Group exploited a then-unknown security flaw, commonly known as a zero-day vulnerability. The malware was installed on the devices via silent phone calls or text messages, requiring no action from the victims. This type of attack is typically rare and extremely valuable, traded for millions. Once installed, the hackers gained access to messages, emails, photos, and even controlled cameras and microphones, leaving users defenseless against complete surveillance.
Meta employees uncovered the vulnerability in May 2019, but it took months to identify more than 1,400 victims and investigate the matter. Working alongside the civil rights organization Citizen Lab, Meta worked tirelessly to expose the attack. It wasn't until five months after the discovery that Meta openly accused the NSO Group of orchestrating the hack and decided to sue.
WhatsApp - A Precedent Setter
The trial shed light on the secretive operations of hacking firms that often operate in a legal gray area. The NSO Group admitted to spending tens of millions annually to exploit security flaws in WhatsApp and other programs. Their claim of focusing on terrorism, child abuse, or other serious crimes was questioned as the jury found evidence of their clients monitoring journalists, dissidents, and human rights activists.
Meta, following the trial's conclusion, stated, "This is the first time that the operators of spyware have been put on trial, and the public is now seeing exactly how they operate. This verdict is an important step forward in protecting privacy and security." Apart from Meta, Apple has also filed a lawsuit against the NSO Group, still pending.
Undaunted NSO Group
Despite the verdict, the NSO Group shows no signs of surrender. A spokesperson told "The Verge" that the company is currently reviewing the details of the verdict and is considering additional legal action, including an appeal.
Sources: The Verge, Meta, Courthouse News Service
- Messenger
Further Insights:
- Detailed Penalties: In addition to the $167,254,000 in punitive damages, the NSO Group was ordered to pay $444,719 in compensatory damages. This brings the total damages to nearly $170 million[1][3][4].
- Background: The lawsuit was initiated in October 2019, six years after the NSO Group's Pegasus spyware was used to hack over 1,400 WhatsApp user accounts. The victims were usually journalists, human rights activists, and government officials[1][2][3].
- Potential Future Actions: The NSO Group has expressed intentions to contest the verdict, suggesting they might appeal the ruling and pursue further legal actions[2].
- Renowned Organizations Involved: Amnesty International and other civil society groups have been engaged in highlighting the human rights implications of Pegasus attacks[2][3].
[1] - The Verge (https://www.theverge.com/2023/3/28/23608761/whatsapp-pegasus-spyware-nso-group-Facebook-lawsuit-details)[2] - Meta (https://about.fb.com/news/2023/03/metas-lawsuit-against-nso-group- demonstrates-ongoing-commitment-to-protecting-people-from-government-hacking/)[3] - Courthouse News Service (https://www.courthousenews.com/california-jury-orders-nso-group-to-pay-167m-to-metas-cellphone-messaging-app-whatsapp/)[4] - CNET (https://www.cnet.com/news/california-jury-orders-nso-group-to-pay-meta-167-million-in- damages-for-hacking-whatsapp-users/)
- "What's up, messenger? The recent court decision against the NSO Group sheds light on their unlawful cybersecurity activities, including the hacking of WhatsApp, a general-news platform, which resulted in a million-dollar fine for their exploitation of technology and breach of user privacy."
- "The impact of the NSO Group's Pegasus spyware extends beyond just WhatsApp; it has been used to snoop on journalists, human rights activists, and government critics, raising concerns about crime-and-justice implications and the need for stronger technology safeguards."
