Meta Secures Legal Victory Against WhatsApp Spyware Developer

Meta has won a major court case against NSO Group, the developer behind the controversial Pegasus spyware, in a ruling that could reshape how the legal system addresses malware-enabled data breaches. A federal jury sided with Meta in its pursuit of damages, holding NSO accountable for the use of its software in a 2019 attack on WhatsApp.

The breach, which affected over 1,000 WhatsApp users, exploited a vulnerability in the app’s video calling feature – users did not even need to answer a call to be infected. The malware secretly installed itself on devices and enabled deep surveillance capabilities, including access to app data, emails, messages, location info, and even the activation of microphones and cameras.

While Meta did not claim that NSO directly launched the attack, it argued that NSO’s technology facilitated the intrusion and therefore bore responsibility for the harm caused. “Put simply, NSO’s Pegasus works to covertly compromise people’s phone with spyware capable of hoovering up information from any app installed on the device,” Meta stated.

The ruling marks a notable precedent by holding a spyware developer – not just the end-user – legally liable for misuse of its tools. The outcome could lead to broader legal challenges against NSO and similar firms, pushing them to reconsider offering such invasive products. Beyond this, it may now be easier for social media companies – as a whole – to get similar legal successes after future spyware attacks that endanger their users’ data.