WhatsApp is moving to hold NSO Group in contempt, claiming a fresh attempt to lure users into downloading Pegasus. It follows last year's $168 mn settlement that barred the firm from targeting the platform. The new allegation centers on a “one‑click” link delivery that could install spyware without user interaction, exploiting a vulnerability in the messaging app’s code.

The technique mirrors earlier exploits where a missed call triggered the payload, later deleted from logs. Rights groups such as Citizen Lab have documented that NSO’s clients—authoritarian regimes like Saudi Arabia, Rwanda and others including India—have used Pegasus against journalists, dissidents and critics rather than criminals. The spyware can bypass encryption on Signal, WhatsApp and other apps, exfiltrating full device contents.

WhatsApp’s lawsuit is backed by Apple, Facebook, Amazon and other US tech firms that filed amicus briefs to keep NSO off their platforms. The company argues that despite being on the US Commerce Department’s Entity List, NSO continues to evade restrictions, endangering US diplomats and businesses. The court’s response will test the durability of the $168 mn settlement and broader export controls.