WhatsApp contempt motion against NSO Group
Regulatory/Legal Action
Summary
Hide ▲
Show ▼
WhatsApp moved the US court to hold NSO Group in contempt over a permanent injunction tied to spyware targeting of users. The company says NSO violated the order by using social engineering and malicious links aimed at WhatsApp users and by creating test accounts and groups that were taken down. The request seeks to keep the court's restrictions on NSO in force after years of litigation over Pegasus.
Related Happenings
NSO Group WhatsApp spear-phishing campaign
Campaign
First: 08.06.2026 20:08
Last: 08.06.2026 20:08
Sources 1
How related:
They tried to trick people into clicking on malicious links to drive them to external websites outside of WhatsApp, similar to previously reported one-click phishing campaigns linked to NSO,
About this happening:
**NSO Group** remains tied to a **WhatsApp** spear-phishing **campaign** that used **malicious links** to push targets to external websites outside the app. On **June 8**, WhatsAp...
NSO Group WhatsApp spear-phishing campaign
CampaignHow related: They tried to trick people into clicking on malicious links to drive them to external websites outside of WhatsApp, similar to previously reported one-click phishing campaigns linked to NSO,
About this happening: **NSO Group** remains tied to a **WhatsApp** spear-phishing **campaign** that used **malicious links** to push targets to external websites outside the app. On **June 8**, WhatsAp...
WhatsApp anti-scam protections now warn on fraudulent device-linking requests
Security Tool/Service
First: 26.03.2026 16:06
Last: 26.03.2026 16:06
Sources 1
About this happening:
**WhatsApp** rolled out **anti-scam protections** that warn users when **device-linking requests** look suspicious, adding a new user-facing control against **fraudulent account-l...
WhatsApp anti-scam protections now warn on fraudulent device-linking requests
Security Tool/ServiceAbout this happening: **WhatsApp** rolled out **anti-scam protections** that warn users when **device-linking requests** look suspicious, adding a new user-facing control against **fraudulent account-l...
SORVEPOTEL WhatsApp malware campaign spreads across Brazil
Campaign
First: 12.03.2026 19:31
Last: 12.03.2026 19:31
Sources 1
About this happening:
A **WhatsApp** malware campaign in **Brazil** is spreading **SORVEPOTEL**, a **self-propagating Windows malware** that uses **phishing ZIP attachments** and a desktop-only lure to...
SORVEPOTEL WhatsApp malware campaign spreads across Brazil
CampaignAbout this happening: A **WhatsApp** malware campaign in **Brazil** is spreading **SORVEPOTEL**, a **self-propagating Windows malware** that uses **phishing ZIP attachments** and a desktop-only lure to...
Lotusbail malicious npm package stealing WhatsApp account data and messages
Malware Activity
First: 22.12.2025 18:08
Last: 22.12.2025 18:08
Sources 1
About this happening:
The **lotusbail** package is a malicious **npm** library that steals **WhatsApp** account data and can leave victims with **persistent unauthorized access**. It masquerades as a l...
Lotusbail malicious npm package stealing WhatsApp account data and messages
Malware ActivityAbout this happening: The **lotusbail** package is a malicious **npm** library that steals **WhatsApp** account data and can leave victims with **persistent unauthorized access**. It masquerades as a l...
GhostPairing WhatsApp pairing-code account-hijacking campaign
Campaign
First: 17.12.2025 21:14
Last: 17.12.2025 21:14
Sources 1
About this happening:
**GhostPairing** is an active **WhatsApp account-hijacking campaign** that abuses the platform’s **device-linking feature** to take over accounts via pairing codes, creating a dir...
GhostPairing WhatsApp pairing-code account-hijacking campaign
CampaignAbout this happening: **GhostPairing** is an active **WhatsApp account-hijacking campaign** that abuses the platform’s **device-linking feature** to take over accounts via pairing codes, creating a dir...
Timeline
-
09.06.2026 11:15 2 articles · 2h ago
WhatsApp asks US court to hold NSO Group in contempt
Legal Policy Action UpdateOn June 8, WhatsApp asks a US court to hold NSO Group in contempt over an alleged violation of a permanent injunction banning the spyware firm from targeting users, seeking to keep the court's restrictions in force.
Show sources
- WhatsApp Discovers NSO Group-Linked Spearphishing Attempts — www.infosecurity-magazine.com — 09.06.2026 11:15
- WhatsApp Discovers NSO Group-Linked Spearphishing Attempts — www.infosecurity-magazine.com — 09.06.2026 11:15
-
09.06.2026 11:15 1 articles · 2h ago
WhatsApp publishes domains tied to NSO Group phishing campaign
Detection Ioc UpdateWhatsApp says it successfully disrupted NSO Group-linked social engineering attempts that used malicious links to drive users to external websites and involved test accounts and groups on WhatsApp, and it published three domains tied to the campaign so other users can check whether they were targeted.
Show sources
- WhatsApp Discovers NSO Group-Linked Spearphishing Attempts — www.infosecurity-magazine.com — 09.06.2026 11:15