US court bars NSO Group from installing spyware on WhatsApp

US court bars NSO Group from installing spyware on WhatsApp

The US judge who cut the amount NSO Group sould pay Meta for a scheme to spy on WhatsApp users also granted an injunction to stop the Israel-based spyware maker's tactics targeting users of the messaging service
The US judge who cut the amount NSO Group sould pay Meta for a scheme to spy on WhatsApp users also granted an injunction to stop the Israel-based spyware maker's tactics targeting users of the messaging service. Photo: JACK GUEZ / AFP
Source: AFP

A US judge on Friday granted an injunction barring Israeli spyware maker NSO Group from targeting WhatsApp users but slashed a $168 million damages award at trial to just $4 million.

District Judge Phyllis Hamilton ruled that NSO Group's behavior fell short of a "particularly egregious" standard needed to support the jury's calculations on a financial penalty.

But in the ruling, seen by AFP, she said the court "concluded that defendants' conduct causes irreparable harm, and there being no dispute that the conduct is ongoing" the judge granted WhatsApp owner Meta an injunction to stop NSO Group's snooping tactics at the messaging service.

Evidence at trial showed that NSO Group reverse-engineered WhatsApp code to stealthily install spyware targeting users, according to the ruling, which called such access to user data "unlawful."

The spyware was repeatedly redesigned to escape detection and bypass security fixes at WhatsApp, the court concluded.

The lawsuit, filed in late 2019, accused NSO Group of cyberespionage targeting journalists, lawyers, human rights activists and others using the encrypted messaging service.

Read also

Argentine peso drops against dollar despite US backing

Hamilton ruled however that the $168 million damages verdict awarded to Meta earlier this year was excessive.

"There have simply not yet been enough cases involving unlawful electronic surveillance in the smartphone era for the court to be able to conclude that defendants' conduct was 'particularly egregious'," Hamilton wrote in the ruling which was seen by AFP.

"As time goes on, more of a shared societal consensus may emerge about the acceptability of defendants' conduct."

Founded in 2010 by Israelis Shalev Hulio and Omri Lavie, NSO Group is based in the seaside high-tech hub of Herzliya, near Tel Aviv.

Media website TechCrunch reported Friday that a US investment group has acquired controlling interest in NSO Group.

The Israeli firm produces Pegasus, a highly invasive tool that can reportedly switch on a target's cell phone camera and microphone and access data on it, effectively turning the phone into a pocket spy.

Read also

US sinks international deal on decarbonising ships

The suit filed in a California federal court contended that NSO tried to infect approximately 1,400 "target devices" with malicious software to steal valuable information.

Infecting smartphones or other gadgets being used for WhatsApp messages meant the content of messages encrypted during transmission could be accessed after they were unscrambled.

The complaint said the attackers "developed a program to enable them to emulate legitimate WhatsApp network traffic in order to transmit malicious code" to take over the devices.

The software has been pinpointed by independent experts as being used by nation states, some of them with poor human rights records.

NSO Group has maintained it only licenses its software to governments for fighting crime and terrorism.

Source: AFP

Authors:
AFP avatar

AFP AFP text, photo, graphic, audio or video material shall not be published, broadcast, rewritten for broadcast or publication or redistributed directly or indirectly in any medium. AFP news material may not be stored in whole or in part in a computer or otherwise except for personal and non-commercial use. AFP will not be held liable for any delays, inaccuracies, errors or omissions in any AFP news material or in transmission or delivery of all or any part thereof or for any damages whatsoever. As a newswire service, AFP does not obtain releases from subjects, individuals, groups or entities contained in its photographs, videos, graphics or quoted in its texts. Further, no clearance is obtained from the owners of any trademarks or copyrighted materials whose marks and materials are included in AFP material. Therefore you will be solely responsible for obtaining any and all necessary releases from whatever individuals and/or entities necessary for any uses of AFP material.