{"id":90268,"date":"2019-10-30T13:18:38","date_gmt":"2019-10-30T20:18:38","guid":{"rendered":"https:\/\/www.intego.com\/mac-security-blog\/?p=90268"},"modified":"2019-11-01T03:37:08","modified_gmt":"2019-11-01T10:37:08","slug":"facebook-sues-nso-group-for-whatsapp-spyware-attack","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/facebook-sues-nso-group-for-whatsapp-spyware-attack\/","title":{"rendered":"Facebook sues NSO Group for WhatsApp spyware attack"},"content":{"rendered":"

\"\"<\/p>\n

 <\/p>\n

Social media giant Facebook, owner of the WhatsApp messaging platform, has filed a lawsuit against NSO Group, an Israeli company that develops software for intelligence agencies. Back in May 2019, NSO Group\u2019s Pegasus spyware was found to have spread to about 1,400 mobile devices via a remotely exploitable vulnerability in the iOS and Android versions of WhatsApp. Facebook\u2019s suit alleges that NSO Group not only used WhatsApp to spread its Pegasus spyware, but that NSO Group also did so in a manner that deliberately targeted \u201cattorneys, journalists, human rights activists, political dissidents, and other senior foreign government officials.\u201d<\/p>\n

\"\"<\/p>\n

It should be noted that although classified as spyware, Pegasus isn\u2019t your garden-variety, consumer-targeted spyware that tracks your shopping habits to sell targeted ads. NSO Group is an Israeli cyber intelligence company that has licensed its software to various governments, nation-state entities, and law enforcement agencies. The company’s software has been linked to hacking infamous drug lord El Chapo\u2019s phone, leading the Mexican president to thank the company for its role in his capture. But on a darker note, in 2018 the New York Times linked NSO Group\u2019s Pegasus software to the murder of journalist Jamal Khashoggi.<\/p>\n

Facebook is seeking an injunction barring NSO Group and any affiliated parties from using WhatsApp or other Facebook services, and Facebook is also seeking monetary damages. As WhatsApp itself notes, \u201cThis is the first time that an encrypted messaging provider is taking legal action against a private entity that has carried out this type of attack against its users.\u201d<\/p>\n

Intego’s Chief Security Analyst, Josh Long, noted that while the lawsuit implies that NSO Group was knowingly involved with the attack on WhatsApp users, for its part, NSO Group\u2019s public statements have implied that some other party perpetrated the attack. \u201cGiven that NSO Group claims it only licenses its technologies to government entities in accordance with Israeli law, this implies that a nation-state attacker with ties to an Israel-friendly government may have been responsible for the attack,\u201d Long said, while quickly noting that one cannot make hasty assumptions about attributing an attack: \u201cIt is also possible that a threat actor that is not<\/em>\u00a0necessarily friendly to Israel could have obtained access to NSO Group’s Pegasus spyware by hacking either the NSO Group itself or any one of its clients.\u201d<\/p>\n

How can I learn more?<\/h3>\n

\"\"<\/a><\/p>\n

You can read more about Facebook\u2019s lawsuit in this Digital Trends article<\/a>.<\/p>\n

This week on the Intego Mac Podcast<\/strong>\u00a0episode 107<\/a>, the Facebook vs. NSO Group lawsuit is among the topics we discuss, along with macOS Catalina\u2019s \u201cdialog fatigue<\/a>\u201d problem, and much more. Be sure to subscribe<\/a> to make sure you never miss the latest episode.<\/p>\n