WhatsApp Wins $167M in NSO Pegasus Spyware Lawsuit
WhatsApp secured a significant victory against NSO Group, winning a $167 million lawsuit over the Pegasus spyware. A jury ruled in favor of the Meta-owned messaging platform after a five-year legal battle. The lawsuit stemmed from a 2019 incident where NSO Group exploited a vulnerability in WhatsApp's audio-calling feature to target over 1,400 users.
Key Revelations from the Trial
The week-long trial, featuring testimony from NSO Group CEO Yaron Shohat and WhatsApp employees, revealed several crucial details:
- How the attack worked: The zero-click attack involved a fake WhatsApp call triggering the download of Pegasus spyware. The attacker only needed the target's phone number.
- Continued targeting: NSO Group continued targeting WhatsApp users even after the lawsuit was filed, using different versions of the exploit.
- Targeting a US phone number: NSO Group admitted to targeting a US phone number as part of a test for the FBI.
- Pegasus usage: NSO Group's CEO explained that Pegasus users select targets, and the system automatically chooses the hacking technique.
- NSO Group's size: The company revealed it employs between 350 and 380 people.
- Shared headquarters: NSO Group's headquarters shares a building with Apple in Herzliya, Israel.
- Pegasus pricing: European customers paid around $7 million, plus an additional $1 million for "covert vectors," for access to Pegasus.
- NSO Group's finances: The company claimed financial difficulties, reporting losses and limited funds.
Financial Struggles
NSO Group CEO Yaron Shohat described the company's financial situation as dire, stating they were "struggling to keep our head above water." The company reported significant losses and limited cash reserves, claiming an inability to pay substantial damages.
This case highlights the ongoing battle against sophisticated spyware and its impact on user privacy. The verdict sets a precedent for holding spyware makers accountable for their actions.
