The Israeli company exploited a zero-day flaw in WhatsApp to enable state actors to illegally monitor smartphones.

On May 6, 2025, a U.S. jury ordered NSO Group, the Israeli developer of the Pegasus spyware, to pay $167 million (148 million euros) in damages to Meta. The exploitation of a zero-day vulnerability in WhatsApp allowed state clients to illegally monitor 1,400 smartphones worldwide, belonging to lawyers, journalists, diplomats, and political dissidents.

Meta had filed a lawsuit in 2019. In December 2024, a U.S. court found NSO Group guilty of violating federal and California laws, as well as WhatsApp’s terms of service. The case was then sent to a jury to determine the damages to be awarded. The amount represents more than 70% of NSO Group’s last known annual revenue, and the company is considering an appeal.

“Our trial has gone down in history as the first victory against illegal spyware that threatens everyone’s security and privacy,” said Zade Alsawah, WhatsApp spokesperson.

Stay tuned in real time
Subscribe to
the newsletter
By providing your email address you agree to receive the Incyber newsletter and you have read our privacy policy. You can unsubscribe at any time by clicking on the unsubscribe link in all our emails.
Stay tuned in real time
Subscribe to
the newsletter
By providing your email address you agree to receive the Incyber newsletter and you have read our privacy policy. You can unsubscribe at any time by clicking on the unsubscribe link in all our emails.