# WhatsApp accuses NSO of new Pegasus lures

Published: 2026-06-19 · Severity: medium
Canonical: https://vorant.io/reports/599893a2-7b0f-5886-ad67-8c11cd97531e/whatsapp-accuses-nso-of-new-pegasus-lures

> WhatsApp says NSO Group is again using WhatsApp to lure targets into installing Pegasus spyware, breaching a US court injunction.

Meta's WhatsApp plans to seek a contempt order against NSO Group, alleging the Israeli spyware vendor has resumed using WhatsApp as a delivery vector to lure victims into installing Pegasus, in violation of a US court ruling issued last year that barred such conduct. The claim, reported by the Financial Times and New York Times, suggests NSO continues targeting operations despite ongoing litigation and prior sanctions against the company.

## Mentioned in this report

- Threat actors: NSO Group
- Malware: Pegasus

Source reporting: https://citizenlab.ca/whatsapp-accuses-nso-of-fresh-pegasus-targeting

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/599893a2-7b0f-5886-ad67-8c11cd97531e/whatsapp-accuses-nso-of-new-pegasus-lures.
Full IOC sets, deployable detections, the entity graph, TAXII 2.1 feed and real-time alerts: https://vorant.io/signup