In a landmark court ruling, the creator of the infamous Pegasus spyware, NSO Group, has been ordered to pay $168 million in damages to WhatsApp. This decision comes after the company was found guilty of exploiting a flaw in WhatsApp’s secure messaging platform to spy on users. The legal battle, held in a California federal court, is the first time a spyware maker has been held accountable for violating the privacy of platforms used by millions worldwide.
WhatsApp, owned by Meta, accused NSO Group of using its spyware to hack into the accounts of journalists, human rights activists, political dissidents, and others, without their consent. The hack, which happened in 2019, exploited a weakness in WhatsApp’s system, letting Pegasus access users’ private data without them knowing. This case has shaken the tech industry, showing the dangers of companies like NSO, which sell tools that bypass security and invade user privacy worldwide.
The Case That Exposed the Spyware Industry
WhatsApp’s lawsuit against NSO Group focused on how Pegasus infected users’ phones through a weakness in the app. Once inside the phone, the spyware could secretly turn on microphones and cameras, record conversations, track locations, and access encrypted messages in other apps. Designed to be nearly invisible, Pegasus made it hard for users to know they were being watched.
Google Gemini Misused: North Korean Hackers Enhance Cybercrime with AI
WhatsApp quickly fixed the vulnerability but also worked with experts to track down hundreds of people who had been targeted. Many were journalists, lawyers, and opposition politicians—people chosen simply because they were critical voices in their countries.
At trial, WhatsApp presented strong evidence that NSO Group used these tactics repeatedly to help clients, including governments, spy on citizens. It became clear that NSO wasn’t just selling to law enforcement for fighting crime and terrorism but was also helping to target individuals who were merely exercising free speech.
The Impact on the Tech Industry
The ruling against NSO Group marks a big step in holding companies accountable for exploiting tech weaknesses for profit. It also opens the door for more lawsuits from tech giants like Apple and Google, whose platforms were also targeted by Pegasus spyware.
WhatsApp’s win set a new standard: spyware companies can no longer claim their products are only used by responsible governments. In fact, evidence showed widespread abuse. NSO’s spyware was used not against criminals, but against activists, lawyers, and politicians who had committed no crimes.
TikTok Slammed with €530 Million Fine Over Secret Data Transfers to China
The case was closely watched by the world’s biggest tech companies, many of which supported WhatsApp’s fight. This ruling sent a clear message to the entire spyware industry: hacking into private platforms and targeting innocent people will not be tolerated.
The Shadowy World of Spyware Development
The case also revealed the secretive world of spyware development. NSO, once a small startup, grew into a company valued at over $1 billion by creating spyware that could break into popular software like Apple’s iPhones and Android phones. These hacking tools were sold to governments for large sums, making NSO a key player in this controversial market.
Despite losing the case, NSO Group has said it will appeal. The company insists its technology helps stop serious crime and terrorism and that it is used responsibly by government agencies. However, the evidence from this trial showed otherwise, as spyware was repeatedly abused to target innocent people around the world.
WhatsApp’s success in court shows that companies exploiting privacy and security flaws will face consequences. This case has shined a spotlight on the spyware industry and served as a warning that such actions will not go unpunished, especially when they harm innocent individuals.
