Overview

• A U.S. jury ordered NSO Group to pay nearly $168 million to Meta for damages related to the 2019 Pegasus spyware attack on WhatsApp users.
• The spyware exploited a zero-click vulnerability, allowing unauthorized access to 1,400 accounts, including those of journalists and human rights defenders.
• The court previously ruled in December 2024 that NSO violated the U.S. Computer Fraud and Abuse Act and California state laws.
• NSO Group plans to appeal the verdict, with its CEO citing financial distress and doubts over the company’s ability to pay the damages.
• Meta announced plans to seek a permanent injunction to prevent future Pegasus attacks on WhatsApp, continuing its legal push for accountability.