Meta Wins $167 Million Against NSO Group for Pegasus Spyware Attacks

In a landmark legal decision, Meta has been awarded $167.25 million in damages after a federal jury found the Israeli spyware maker NSO Group liable for hacking more than 1,400 WhatsApp users through its Pegasus spyware. This verdict marks a significant victory in the fight against illegal spyware that threatens digital privacy and security worldwide.

The Pegasus spyware exploited a vulnerability in WhatsApp that allowed it to be installed via a phone call without the user answering. Once installed, Pegasus could activate the device’s camera and microphone, access emails, text messages, and location data. The spyware primarily targeted activists, journalists, diplomats, and other high-risk individuals, raising serious concerns about surveillance and human rights violations.

Meta’s lawsuit, initiated in 2019 following research by Citizen Lab, underscores the growing threat of state-sponsored spyware and the urgent need for robust cybersecurity measures. The court also awarded Meta compensatory damages of $444,719 and is pursuing a court order to prevent NSO Group from targeting WhatsApp users in the future.

This case sets a precedent for holding spyware vendors accountable and serves as a critical deterrent against the proliferation of malicious surveillance tools. Meta has also committed to supporting digital rights organizations that work to protect users from spyware threats.

Broader Implications for Cybersecurity and Privacy

The Meta vs. NSO Group case highlights the evolving landscape of cybersecurity threats where sophisticated spyware can infiltrate widely used communication platforms. It emphasizes the importance of proactive vulnerability detection, legal accountability, and international cooperation to combat spyware abuse.

For organizations and governments, this ruling reinforces the necessity to invest in advanced cybersecurity defenses, continuous monitoring, and rapid incident response capabilities. It also encourages advocacy for stronger regulations against spyware vendors and enhanced protections for vulnerable populations such as journalists and human rights defenders.

Meta’s commitment to transparency, including publishing deposition transcripts and supporting digital rights groups, sets a positive example for corporate responsibility in cybersecurity. This approach not only aids in public awareness but also fosters collaboration across sectors to strengthen digital privacy worldwide.