Meta Wins Landmark Verdict Against NSO Group

A federal jury in California ordered Israeli spyware developer NSO Group to pay Meta, parent company of WhatsApp, over $167 million in punitive damages and approximately $444,000 in compensatory damages after a six-year legal battle. The case stemmed from NSO's Pegasus spyware exploiting a WhatsApp vulnerability to hack more than 1,400 users, including journalists, activists, and government officials, using a sophisticated zero-click attack that granted remote access to phones' cameras, microphones, and data. Meta and Citizen Lab collaborated to uncover the attack. The court found NSO violated the U.S. Computer Fraud and Abuse Act, making the verdict a landmark deterrent against the spyware industry. NSO asserts its tools are vital for law enforcement, but plans to appeal the ruling. The case has intensified scrutiny of the global surveillance industry and may lead to further legal and regulatory action against exploit sellers.