Find notable cyber news and cases, enriched with sources, timelines, and signals.

WhatsApp contempt motion against NSO Group

Regulatory/Legal Action
First reported
Last updated
Happening score
H score 32
1 unique sources, 1 articles

Summary

Hide ▲

WhatsApp moved the US court to hold NSO Group in contempt over a permanent injunction tied to spyware targeting of users. The company says NSO violated the order by using social engineering and malicious links aimed at WhatsApp users and by creating test accounts and groups that were taken down. The request seeks to keep the court's restrictions on NSO in force after years of litigation over Pegasus.

Related Happenings

NSO Group WhatsApp spear-phishing campaign

Campaign
First: 08.06.2026 20:08 Last: 08.06.2026 20:08 Sources 1

How related: They tried to trick people into clicking on malicious links to drive them to external websites outside of WhatsApp, similar to previously reported one-click phishing campaigns linked to NSO,

About this happening: **NSO Group** remains tied to a **WhatsApp** spear-phishing **campaign** that used **malicious links** to push targets to external websites outside the app. On **June 8**, WhatsAp...

WhatsApp anti-scam protections now warn on fraudulent device-linking requests

Security Tool/Service
First: 26.03.2026 16:06 Last: 26.03.2026 16:06 Sources 1

About this happening: **WhatsApp** rolled out **anti-scam protections** that warn users when **device-linking requests** look suspicious, adding a new user-facing control against **fraudulent account-l...

SORVEPOTEL WhatsApp malware campaign spreads across Brazil

Campaign
First: 12.03.2026 19:31 Last: 12.03.2026 19:31 Sources 1

About this happening: A **WhatsApp** malware campaign in **Brazil** is spreading **SORVEPOTEL**, a **self-propagating Windows malware** that uses **phishing ZIP attachments** and a desktop-only lure to...

Lotusbail malicious npm package stealing WhatsApp account data and messages

Malware Activity
First: 22.12.2025 18:08 Last: 22.12.2025 18:08 Sources 1

About this happening: The **lotusbail** package is a malicious **npm** library that steals **WhatsApp** account data and can leave victims with **persistent unauthorized access**. It masquerades as a l...

GhostPairing WhatsApp pairing-code account-hijacking campaign

Campaign
First: 17.12.2025 21:14 Last: 17.12.2025 21:14 Sources 1

About this happening: **GhostPairing** is an active **WhatsApp account-hijacking campaign** that abuses the platform’s **device-linking feature** to take over accounts via pairing codes, creating a dir...

Timeline

  1. 09.06.2026 11:15 2 articles · 2h ago

    WhatsApp asks US court to hold NSO Group in contempt

    Legal Policy Action Update

    On June 8, WhatsApp asks a US court to hold NSO Group in contempt over an alleged violation of a permanent injunction banning the spyware firm from targeting users, seeking to keep the court's restrictions in force.

    Show sources
  2. 09.06.2026 11:15 1 articles · 2h ago

    WhatsApp publishes domains tied to NSO Group phishing campaign

    Detection Ioc Update

    WhatsApp says it successfully disrupted NSO Group-linked social engineering attempts that used malicious links to drive users to external websites and involved test accounts and groups on WhatsApp, and it published three domains tied to the campaign so other users can check whether they were targeted.

    Show sources