A U.S. federal jury in California has ordered Israeli spyware firm NSO Group to pay Meta $167.25 million for hacking 1,400 WhatsApp users using its notorious Pegasus software.
Meta originally filed the lawsuit in 2019 after Citizen Lab researchers uncovered a major WhatsApp vulnerability. This flaw allowed Pegasus to be installed on a user’s phone simply via a missed call—no interaction required.
Once installed, the spyware could activate cameras and microphones, access messages, and track locations. The attack reportedly targeted journalists, activists, diplomats, and human rights defenders.
In addition to the $167 million in punitive damages, Meta was awarded $444,719 in compensatory damages. The company called the ruling “an important step forward for privacy and security,” adding that the verdict sends a strong message to spyware developers around the world.
