WhatsApp accuses NSO of new Pegasus lures

19 June 2026 medium threat

WhatsApp says NSO Group is again using WhatsApp to lure targets into installing Pegasus spyware, breaching a US court injunction.

Meta's WhatsApp plans to seek a contempt order against NSO Group, alleging the Israeli spyware vendor has resumed using WhatsApp as a delivery vector to lure victims into installing Pegasus, in violation of a US court ruling issued last year that barred such conduct. The claim, reported by the Financial Times and New York Times, suggests NSO continues targeting operations despite ongoing litigation and prior sanctions against the company.

Mentioned in this report

Threat actors NSO Group

Malware Pegasus

Source reporting: https://citizenlab.ca/whatsapp-accuses-nso-of-fresh-pegasus-targeting

This is the public brief

Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.

Start free