31°46′40.7″N 35°14′07.7″E
Top Stories
The Wire
← The Wire
The Front · Dispatch · SecurityDeveloping

Meta says NSO Group targeted WhatsApp users in Jordan and Lebanon despite court ban

The Zioneer Intelligence Desk
Meta says NSO Group targeted WhatsApp users in Jordan and Lebanon despite court ban

Primary source Internal intake · 1 reviewed intake signal · Desk window 01:34

TL;DR

Meta said it caught and disrupted spear-phishing attempts by NSO Group targeting a handful of WhatsApp users in Jordan and Lebanon, as well as the creation of test accounts and groups, despite a permanent U.S. court order barring the Israeli-founded spyware firm from targeting the platform.

01 · THE DISPATCH

Meta announced on Wednesday that it had detected and neutralized a fresh campaign by NSO Group targeting WhatsApp users in Jordan and Lebanon. The company said it identified "spear phishing attempts" aimed at a handful of specific users, alongside the creation of "test accounts and groups" on the platform.

The Israeli-founded spyware firm, now under U.S. ownership, was permanently barred in 2025 from targeting WhatsApp or its users after losing a court case to Meta. The original $167 million judgment was later reduced to $4 million, but the permanent injunction remained in force. Meta's latest disclosure suggests NSO has continued its activities in violation of that order, this time focusing on targets in Jordan and Lebanon.

As The Zioneer reported on June 8, WhatsApp had separately asked a U.S. federal court to sanction NSO Group over alleged violations of the same court order. Monday's announcement adds technical detail on the attempted intrusions and names specific countries where users were targeted.

NSO Group is best known for developing Pegasus, the spyware software that infiltrated devices to harvest messages, photos, calls and other data. The company has not publicly responded to Meta's latest claims. No information has been released on which specific users were targeted or whether any devices were successfully compromised.

Related dispatches
03 · Source and signal

Source and signal

A single-sourced dispatch is never rated Confirmed or Strong. Its Signal strengthens only when a second, independent source corroborates it.

  • Internal intake
Desk accountability

This dispatch is published under The Zioneer Intelligence Desk. Raw intake channels remain internal provenance; an external outlet or channel is named only when it materially helps readers evaluate a specific claim.