Meta Accuses NSO Group of Fresh WhatsApp Targeting in Jordan and Lebanon

Meta Accuses NSO Group of Fresh WhatsApp Targeting in Jordan and Lebanon

Meta Platforms has returned to US federal court with a contempt motion against NSO Group, alleging that the Israeli spyware firm violated a permanent injunction by attempting to compromise WhatsApp users once again. The filing, submitted on June 8, 2026, claims that NSO-linked actors conducted spear-phishing operations aimed at a small number of accounts in Jordan and Lebanon. WhatsApp engineers detected the activity and blocked the attempts before any successful compromise occurred. This development marks a significant escalation in a long-running legal dispute between the Silicon Valley company and the Herzliya-based firm known for its Pegasus surveillance tool.

Details of the Detected Activity and WhatsApp's Response

According to Meta's court documents, the recent operations involved the creation of test accounts and groups on the WhatsApp platform, a tactic consistent with prior efforts to map potential targets. The attacks focused on users located in Jordan and Lebanon, countries that share borders with Israel and maintain varying degrees of diplomatic or security engagement with it. Meta published an update titled "Fighting Spyware: An Update From WhatsApp" on the same day, outlining the defensive measures taken. The company emphasized that no users were successfully infected during these incidents, but it argued that the pattern demonstrated ongoing disregard for the December 2024 court ruling that held NSO liable for earlier Pegasus-related hacking of WhatsApp.

Israeli cybersecurity firms like NSO have long operated from Herzliya's industrial zones, where many export-oriented technology companies maintain headquarters. The latest detection underscores the technical capabilities of Pegasus, which can achieve remote zero-click access to devices without user interaction. Meta's legal team framed these actions as direct breaches of the injunction that accompanied the $168 million judgment against NSO.

Legal Escalation Through Contempt Proceedings

The contempt motion represents a sharper legal tool than the original civil case. While the December 2024 ruling established liability and imposed financial penalties, a contempt finding could trigger additional sanctions, including fines or restrictions enforced directly by the court. NSO Group was already added to the US Commerce Department's Entity List in November 2021, limiting its access to American technology and components. The Biden administration's 2025 executive order further restricted US government procurement of commercial spyware known to have been misused abroad. Meta's latest filing argues that these prior measures have not deterred continued activity on WhatsApp infrastructure.

Court records show that the original lawsuit centered on NSO's use of Pegasus to target journalists, human rights defenders, and government officials through WhatsApp vulnerabilities. The new motion claims that test account creation and phishing attempts in Jordan and Lebanon constitute fresh violations. Legal observers note that contempt proceedings carry higher stakes for enforcement, particularly when they involve cross-border technology companies subject to US jurisdiction.

Implications for Israel's Cybersecurity Export Sector

NSO Group's presence in Herzliya forms part of Israel's broader cybersecurity export industry, which contributes significantly to the national economy through sales to foreign governments and security agencies. The current dispute highlights ongoing tensions between Israel's interest in sustaining this sector and American pressure to curb firms accused of misuse. Israeli officials have remained largely silent on the June 2026 filing, offering no public statements from the Prime Minister's Office or the Foreign Ministry. This restraint reflects the delicate balance between supporting domestic technology companies and preserving strategic ties with Washington.

Reputational effects on the wider Israeli tech community remain a concern among industry analysts in Tel Aviv. While Pegasus has been marketed for counterterrorism and law enforcement purposes, repeated legal challenges in US courts risk associating other Israeli exporters with similar controversies. The case could influence licensing decisions by the Israeli Ministry of Defense, which oversees defense-related technology exports from facilities in Herzliya and other centers.

Regional Dynamics Involving Jordan and Lebanon

The targeting of WhatsApp users in Jordan and Lebanon carries particular weight given Israel's security relationships in the region. Jordan maintains a formal peace treaty with Israel, while Lebanon shares a volatile northern border where Hezbollah maintains significant influence. Surveillance tools like Pegasus have historically been linked to monitoring threats emanating from these areas. Meta's detection of activity in both countries suggests that NSO's clients may include governments seeking intelligence on cross-border networks. Such operations intersect with Israel's core security priorities, including monitoring militant groups and maintaining situational awareness along its frontiers.

At the same time, the incidents raise questions about how commercial spyware intersects with official Israeli foreign policy. The absence of comment from Jerusalem leaves open whether these specific attempts aligned with state interests or represented unauthorized client use. The regional context adds complexity to the legal proceedings unfolding in US courts.

Surveillance, Privacy, and Government Oversight Debates

The Meta-NSO dispute feeds into wider international discussions about the balance between state surveillance needs and individual privacy protections. Pegasus has drawn scrutiny from organizations including the United Nations and European Union bodies for its potential to enable overreach by client governments. In Israel, the technology is viewed primarily through the lens of national security requirements, yet the repeated court actions in the United States illustrate the friction that arises when commercial products reach foreign users. The contempt motion could accelerate calls for tighter export controls on Israeli spyware firms headquartered in Herzliya and similar locations.

Israeli technology companies continue to navigate these pressures while contributing to both domestic defense capabilities and global markets. The outcome of the current proceedings may shape future regulatory approaches by Israeli authorities and influence how the country's cybersecurity sector positions itself internationally.