Pegasus Spyware: NSO Group Ordered to Pay $167 Million to Meta

The Israeli company exploited a zero-day flaw in WhatsApp to enable state actors to illegally monitor smartphones.

On May 6, 2025, a U.S. jury ordered NSO Group, the Israeli developer of the Pegasus spyware, to pay $167 million (148 million euros) in damages to Meta. The exploitation of a zero-day vulnerability in WhatsApp allowed state clients to illegally monitor 1,400 smartphones worldwide, belonging to lawyers, journalists, diplomats, and political dissidents.

Meta had filed a lawsuit in 2019. In December 2024, a U.S. court found NSO Group guilty of violating federal and California laws, as well as WhatsApp’s terms of service. The case was then sent to a jury to determine the damages to be awarded. The amount represents more than 70% of NSO Group’s last known annual revenue, and the company is considering an appeal.

“Our trial has gone down in history as the first victory against illegal spyware that threatens everyone’s security and privacy,” said Zade Alsawah, WhatsApp spokesperson.