# WhatsApp Accuses NSO Group of Contempt, Alleges New Spyware Attacks **WhatsApp** has filed a contempt order against **NSO Group**, accusing the controversial spyware manufacturer of violating a standing court injunction. The **Meta**-owned messaging platform alleges that **NSO Group** deployed new spear-phishing attacks against its users, despite a previous court order prohibiting such actions. ## Contempt Filing Follows Detected Spear-Phishing On Monday, **WhatsApp** formally accused **NSO Group** of deploying spear-phishing attacks against its users. This action directly contravenes an October court order that explicitly barred the firm from using the messaging app as an attack vector. The **Meta**-owned platform detected these new attacks after users reported suspicious activity, as detailed in a [Meta blog post](https://about.fb.com/news/2026/06/fighting-spyware-an-update-from-whatsapp/). **WhatsApp** is now seeking a federal court contempt order against **NSO Group**, citing the violation of the permanent injunction. **NSO Group** has a long history of alleged spyware abuses globally, often implicated in surveilling human rights activists, journalists, and other civil society members. ## A History of Legal Battles This latest development follows a successful lawsuit by **WhatsApp** against **NSO Group**. That case stemmed from the 2019 targeting of approximately 1,400 **WhatsApp** users with zero-click attacks. In May, a jury initially awarded **WhatsApp** $167 million, though this amount was later reduced to $4.4 million by the federal judge overseeing the proceedings. The permanent injunction, issued by the judge in October, was met with strong opposition from **NSO Group**. The company argued that the order could “put NSO’s entire enterprise at risk” and potentially “force NSO out of business.” **NSO Group**'s subsequent motion to stay the order, which was denied, further claimed “irreparable, potentially existential injuries” if they were unable to mount attacks via **WhatsApp**. **NSO Group** has also contended that the injunction undermines public safety by hindering law enforcement, intelligence, and counterterrorism operations. In November, **NSO Group** filed an appeal to reverse the permanent injunction, a process that remains ongoing. ## New Attack Vectors and User Vigilance **WhatsApp** reports that the latest attacks utilized social engineering techniques. These methods aimed to “trick people into clicking on malicious links to drive them to external websites outside of WhatsApp,” mirroring previously documented 1-click phishing campaigns linked to **NSO Group**. The messaging app also confirmed that **NSO Group** had created test accounts and groups, which **WhatsApp** has since removed. A spokesperson for **NSO Group** did not immediately respond to requests for comment regarding the new allegations. **WhatsApp** emphasized the gravity of the situation, stating, “Last year, WhatsApp made history by securing a landmark verdict and permanent injunction barring **NSO Group** — a spyware firm blacklisted for actions contrary to US national security — from targeting WhatsApp and its users ever again.” The company further quoted the court’s unequivocal stance: “**NSO Group** violated the federal and state laws against hacking.” Now, **WhatsApp** is asking the court to hold **NSO Group** in contempt of that very order. The platform has also shared threat indicators associated with the alleged spyware firm’s methods and is urging the public to check for potential targeting by **NSO Group**-linked social engineering tactics across various platforms, including text messages and emails. Recent reports indicate that **NSO Group** was acquired by a group of American investors last year, with intentions to enter the U.S. market.