Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

NSO Group WhatsApp spear-phishing campaign

Campaign
First reported
Last updated
Happening score
H score 33
2 unique sources, 2 articles

Summary

Hide ▲

Meta detected and blocked an NSO Group spear-phishing campaign that targeted WhatsApp users with malicious links designed to send victims to external websites. The activity mattered because it used deceptive account infrastructure and phishing lures tied to a known spyware vendor, increasing the risk of account compromise and follow-on espionage. Meta also said it removed test accounts and groups associated with the operation and identified related malicious domains.

Related Happenings

NCSC alert on messaging-app targeting of high-risk individuals

Public Sector Action
First: 02.04.2026 17:15 Last: 02.04.2026 17:15 Sources 1

About this happening: The **UK National Cyber Security Centre (NCSC)** issued a **March 31 alert** warning that **Russia-based actors** were targeting **high-risk individuals** through messaging apps,...

Open Happening

Augmented Marauder / Water Saci multi-pronged phishing campaign targeting Latin America and Europe

Campaign
First: 01.04.2026 15:36 Last: 01.04.2026 15:36 Sources 1

About this happening: **Water Saci** is actively evolving a **WhatsApp Web worm** in **Brazil** that uses **HTA** and **PDF** lures to deliver a **banking trojan**. The latest wave shifts from **PowerS...

Open Happening

SORVEPOTEL WhatsApp malware campaign spreads across Brazil

Campaign
First: 12.03.2026 19:31 Last: 12.03.2026 19:31 Sources 1

About this happening: A **WhatsApp** malware campaign in **Brazil** is spreading **SORVEPOTEL**, a **self-propagating Windows malware** that uses **phishing ZIP attachments** and a desktop-only lure to...

Open Happening

Meta rolls out anti-scam protections and AI scam detection across WhatsApp, Facebook, and Messenger

Security Tool/Service
First: 11.03.2026 15:29 Last: 11.03.2026 15:29 Sources 1

About this happening: Meta is rolling out **anti-scam protections** across **WhatsApp, Facebook, and Messenger**, using warnings and AI detection to block scams before users engage. The updates target...

Open Happening

Russian state-sponsored hackers' ongoing Signal and WhatsApp phishing campaign

Campaign
First: 09.03.2026 23:24 Last: 09.03.2026 23:24 Sources 1

About this happening: An **ongoing Russian state-sponsored phishing campaign** is targeting **Signal** and **WhatsApp** users, with the **UK NCSC** warning on **March 31** that **Russia-based actors**...

Open Happening

Timeline

  1. 08.06.2026 20:08 3 articles · 2h ago

    Meta blocks NSO Group spear-phishing attempts against WhatsApp users

    Initial Disclosure

    Meta detected and blocked spear-phishing attempts linked to NSO Group that tried to lure WhatsApp users to external websites with malicious links. The company also removed NSO Group test accounts and groups on WhatsApp and identified related domains including fr24cast[.]com, ghazacast[.]com, and ikhwancast[.]com.

    Show sources
    Open in new tab
  2. 08.06.2026 20:08 1 articles · 2h ago

    Meta files contempt order against NSO Group over WhatsApp targeting

    Legal Policy Action Update

    Meta said it is filing a federal court contempt order against NSO Group for violating a permanent injunction that barred the company from targeting WhatsApp and its users. It also urged high-risk users to enable strict account settings, including two-step verification, turning off link previews, and limiting profile visibility and group adds to trusted contacts.

    Show sources
    Open in new tab