All products
NSO Group Permanently Barred from Targeting WhatsApp Users with Pegasus Spyware
A federal judge has ordered spyware maker NSO to stop using its Pegasus app to target or infect users of WhatsApp. This ruling is a significant development in the ongoing saga of spyware and cybersecurity threats. The Pegasus app has been at the center of controversy for its ability to surreptitiously infect mobile phones and intercept encrypted messages.
The ruling, issued by Phyllis J. Hamilton of the US District Court of the District of Northern California, grants a permanent injunction sought by WhatsApp owner Meta in a case it brought against NSO in 2019. The lawsuit alleged that Meta caught NSO trying to surreptitiously infect about 1,400 mobile phones—many belonging to attorneys, journalists, human-rights activists, political dissidents, diplomats, and senior foreign government officials—with Pegasus. As part of the campaign, NSO created fake WhatsApp accounts and targeted Meta infrastructure.
Implications of the Ruling
The ruling has significant implications for the cybersecurity landscape. Friday’s ruling ordered NSO to permanently cease targeting WhatsApp users, attempting to infect their devices, or intercepting WhatsApp messages, which are end-to-end encrypted using the open source Signal Protocol. Hamilton also ruled that NSO must delete any data it obtained when targeting the WhatsApp users. This ruling sets a precedent for the protection of user data and the limits of spyware use.
NSO’s Argument and the Court’s Decision
NSO had argued that such a ruling would “force NSO out of business,” as Pegasus is its “flagship product.” However, Hamilton ruled that the harm Pegasus posed to Meta outweighed any such considerations. The court’s decision highlights the importance of protecting user data and the need for companies to prioritize cybersecurity. As Hamilton wrote, “In the court’s view, any business that deals with users’ personal information, and that invests resources into ways to encrypt that personal information, is harmed by the unauthorized access of that personal information—and it is more than just a reputational harm, it’s a business harm.”
The ruling is a significant victory for WhatsApp and its users, and it sets a precedent for the protection of user data in the face of spyware threats. For more information on this story, visit Here
Image Credit: arstechnica.com