WhatsApp contempt motion against NSO Group
Regulatory/Legal Action
Summary
Hide ▲
Show ▼
WhatsApp moved the US court to hold NSO Group in contempt over a permanent injunction tied to spyware targeting of users. The company says NSO violated the order by using social engineering and malicious links aimed at WhatsApp users and by creating test accounts and groups that were taken down. The request seeks to keep the court's restrictions on NSO in force after years of litigation over Pegasus.
Related Happenings
NSO Group WhatsApp spear-phishing campaign
Campaign
H score37
First: 08.06.2026 20:08
Last: 08.06.2026 20:08
Sources 1
How related:
They tried to trick people into clicking on malicious links to drive them to external websites outside of WhatsApp, similar to previously reported one-click phishing campaigns linked to NSO,
About this happening:
NSO Group remains tied to a WhatsApp spear-phishing campaign that used malicious links to push targets to external websites outside the app. On June 8, WhatsAp...
NSO Group WhatsApp spear-phishing campaign
CampaignHow related: They tried to trick people into clicking on malicious links to drive them to external websites outside of WhatsApp, similar to previously reported one-click phishing campaigns linked to NSO,
About this happening: NSO Group remains tied to a WhatsApp spear-phishing campaign that used malicious links to push targets to external websites outside the app. On June 8, WhatsAp...
WhatsApp anti-scam protections now warn on fraudulent device-linking requests
Security Tool/Service
H score14
First: 26.03.2026 16:06
Last: 26.03.2026 16:06
Sources 1
About this happening:
WhatsApp rolled out anti-scam protections that warn users when device-linking requests look suspicious, adding a new user-facing control against fraudulent account-l...
WhatsApp anti-scam protections now warn on fraudulent device-linking requests
Security Tool/ServiceAbout this happening: WhatsApp rolled out anti-scam protections that warn users when device-linking requests look suspicious, adding a new user-facing control against fraudulent account-l...
SORVEPOTEL WhatsApp malware campaign spreads across Brazil
Campaign
H score31
First: 12.03.2026 19:31
Last: 12.03.2026 19:31
Sources 1
About this happening:
A WhatsApp malware campaign in Brazil is abusing trusted chats and WhatsApp Web to spread SORVEPOTEL on Windows desktops. The lure uses malicious ZIP attac...
SORVEPOTEL WhatsApp malware campaign spreads across Brazil
CampaignAbout this happening: A WhatsApp malware campaign in Brazil is abusing trusted chats and WhatsApp Web to spread SORVEPOTEL on Windows desktops. The lure uses malicious ZIP attac...
Lotusbail malicious npm package stealing WhatsApp account data and messages
Malware Activity
H score30
First: 22.12.2025 18:08
Last: 22.12.2025 18:08
Sources 1
About this happening:
The lotusbail package is a malicious npm library that steals WhatsApp account data and can leave victims with persistent unauthorized access. It masquerades as a l...
Lotusbail malicious npm package stealing WhatsApp account data and messages
Malware ActivityAbout this happening: The lotusbail package is a malicious npm library that steals WhatsApp account data and can leave victims with persistent unauthorized access. It masquerades as a l...
GhostPairing WhatsApp pairing-code account-hijacking campaign
Campaign
H score41
First: 17.12.2025 21:14
Last: 17.12.2025 21:14
Sources 1
About this happening:
GhostPairing is an active WhatsApp account-hijacking campaign that abuses the platform’s device-linking feature to take over accounts via pairing codes, creating a dir...
GhostPairing WhatsApp pairing-code account-hijacking campaign
CampaignAbout this happening: GhostPairing is an active WhatsApp account-hijacking campaign that abuses the platform’s device-linking feature to take over accounts via pairing codes, creating a dir...
Timeline
-
09.06.2026 11:15 2 articles · 1mo ago
WhatsApp asks US court to hold NSO Group in contempt
Legal Policy Action UpdateOn June 8, WhatsApp asks a US court to hold NSO Group in contempt over an alleged violation of a permanent injunction banning the spyware firm from targeting users, seeking to keep the court's restrictions in force.
Show sources
- WhatsApp Discovers NSO Group-Linked Spearphishing Attempts — www.infosecurity-magazine.com — 09.06.2026 11:15
- WhatsApp Discovers NSO Group-Linked Spearphishing Attempts — www.infosecurity-magazine.com — 09.06.2026 11:15
-
09.06.2026 11:15 1 articles · 1mo ago
WhatsApp publishes domains tied to NSO Group phishing campaign
Detection Ioc UpdateWhatsApp says it successfully disrupted NSO Group-linked social engineering attempts that used malicious links to drive users to external websites and involved test accounts and groups on WhatsApp, and it published three domains tied to the campaign so other users can check whether they were targeted.
Show sources
- WhatsApp Discovers NSO Group-Linked Spearphishing Attempts — www.infosecurity-magazine.com — 09.06.2026 11:15