Meta Files Contempt Motion Against NSO Over WhatsApp Attacks

Meta Seeks Contempt Ruling in Ongoing Dispute with NSO Group

Meta has filed a contempt motion before the US District Court for the Northern District of California this week, alleging that the Israeli spyware firm NSO Group violated a permanent injunction issued in 2025. The filing states that clear and convincing evidence shows NSO began violating the court's order almost immediately after it was put in place. Meta claims the Israeli company continued efforts to target WhatsApp users through spear-phishing attacks, specifically in Jordan and Lebanon. The motion asks the court to hold NSO in contempt for these actions.

The complaint details how NSO is accused of running a phishing campaign that tricks users into clicking links leading to malicious websites. According to the sources, WhatsApp caught and disrupted these spear-phishing attempts aimed at a handful of users in the specified countries. NSO had also been caught creating test accounts and groups on the platform. This development comes after Meta initially sued the firm in 2019 over Pegasus spyware attacks on WhatsApp.

Background on the Permanent Injunction and Prior Actions

In October 2025, a US judge issued a permanent injunction that barred NSO from accessing WhatsApp's servers. The order permanently prohibited the Israeli firm from targeting WhatsApp and its users. NSO was already blacklisted by the US Commerce Department in 2021. The current motion builds on that foundation, with Meta arguing that the company failed to comply with the restrictions from the outset.

The Pegasus spyware developed by NSO has been linked in public reports to surveillance of journalists, human rights activists, and government officials worldwide. The 2019 lawsuit centered on these capabilities being used against WhatsApp accounts. The recent filing emphasizes that the injunction was meant to prevent any further access or interference with the messaging service.

Meta's Specific Allegations and Evidence Presented

Meta stated that it had caught and disrupted the spear-phishing attempts by NSO Group. The company also noted the creation of test accounts and groups on WhatsApp as part of the alleged violations. The motion describes these activities as direct breaches of the 2025 court order that barred NSO from ever targeting the platform again.

According to the complaint, the phishing campaign involved links designed to lead users to malicious sites. Meta is asking the federal court to enforce the injunction through a contempt finding. The filing highlights that these efforts occurred in Jordan and Lebanon, involving only a limited number of accounts that were quickly identified and stopped.

Israeli Context and Impact on Tech Sector Reputation

As an Israeli company, NSO Group's involvement in this case draws attention to the country's cyber industry and its role in defense exports. The allegations connect to broader discussions about how such firms operate within Israel's technology landscape. This legal action in a US court could influence perceptions of Israeli tech exports and their alignment with international standards.

The dispute occurs amid ongoing US-Israel relations, where technology cooperation has long been a key element. NSO's Pegasus tool, developed in Israel, has featured in global surveillance stories, raising questions about oversight in the sector. From an Israeli perspective, the case underscores the need for companies to navigate complex regulatory environments in foreign markets.

Implications extend to Israel's defense-related exports, as spyware technologies often intersect with national security interests. The filing by Meta may prompt further scrutiny from US authorities, potentially affecting how Israeli firms engage with American platforms and legal systems. Observers note that maintaining strong bilateral ties requires careful handling of such commercial and legal challenges.

Regional Dynamics in Jordan and Lebanon

The targeted users were located in Jordan and Lebanon, adding a layer of regional context to the claims. These countries have been sites of various digital security concerns in recent years. Meta's detection of the attempts highlights the challenges of protecting users across the Middle East from sophisticated phishing operations.

NSO's alleged activities in these areas reflect the wider use of surveillance tools in the region. The handful of accounts involved suggests a focused effort rather than widespread deployment. This aspect of the case illustrates how legal battles between major tech firms and spyware developers play out against the backdrop of Middle Eastern geopolitics.

Potential Outcomes and Court Considerations

The US District Court for the Northern District of California will review the contempt motion and the evidence provided by Meta. NSO has not issued a public complaint in response to the latest filing, according to available reports. Meta has requested additional pressure from the US government to ensure compliance with the existing injunction.

If the court finds NSO in contempt, it could lead to further sanctions or enforcement measures. The case continues to evolve from the original 2019 lawsuit through the 2025 permanent ban and now this enforcement action. All parties remain subject to the judicial process in the specified federal court.