US judge: WhatsApp lawsuit against Israeli spyware firm NSO can proceed

NSO Group was sued last year by messaging app owned by Facebook

An Israeli company whose spyware has been used to target journalists in India, politicians in Spain, and human rights activists in Morocco may soon be forced to divulge information about its government clients and practices after a judge in California ruled that a lawsuit against the company could proceed.

NSO Group was sued by WhatsApp, which is owned by Facebook, last year, after the popular messaging app accused the company of sending malware to 1,400 of its users over a two-week period and targeting their mobile phones.

In a ruling that the case could proceed in a US district court in California, Judge Phyllis Hamilton said she had not been entirely persuaded by NSO Group’s argument that it had no role in the targeting of WhatsApp’s users. Instead, Judge Hamilton said it appeared that NSO Group “retained some role” in the targeting of individuals, “even if it was at the direction of their customers”. The case will now proceed to discovery, in which both sides can request documents and records.

WhatsApp, which has said that 100 members of civil society from around the world were targeted in the “unlawful” 2019 attack, said it was pleased with the court’s decision.

“The decision also confirms that WhatsApp will be able to obtain relevant documents and other information about NSO’s practices,” a WhatsApp spokesperson said.

Judge Hamilton also pointed out that the underlying facts in the case – that someone sent malicious code and malware through WhatsApp’s servers – did not appear to be disputed. Instead, the lawsuit revolved around whether NSO Group’s “sovereign customers” were to blame, or the company itself.

NSO Group has said it only sells spyware to government clients and law enforcement agencies to track terrorists and criminals. It has argued that critics of the company’s practices, including privacy advocates, have ignored a grave problem facing law enforcement agencies around the world: the proliferation of encrypted communications applications like WhatsApp, which it argues have made it easier for terrorists and other criminals to evade detection. NSO Group has retained the law firm of King & Spalding to represent it in the case. Its legal team includes the Trump administration’s former deputy attorney general, Rod Rosenstein.

NSO Group said in a statement: “Our legal team is reviewing the court’s decision, so we are not in a position to comment in detail at this time. Our technology is used to save lives and prevent terror and crime worldwide, and we remain confident that our conduct is lawful.”

NSO Group’s past customers have reportedly included Saudi Arabia, Mexico, and the United Arab Emirates, and its spyware is alleged to have been used against human rights campaigners, including Omar Abdulaziz, a close associate of the murdered Washington Post journalist Jamal Khashoggi. NSO Group has strenuously denied its software was ever used to target Khashoggi personally and has said Abdulaziz, who is suing the company in Israel, had a history of “unfounded claims” against NSO Group.

WhatsApp and research collaborators at Citizen Lab at the University of Toronto, alerted the 1,400 users who they say were targeted in the attack last year, prompting many of the individuals to come forward. They included more than a dozen journalists in India, prominent journalists and human rights campaigners in Morocco, exiled Rwandan activists living in Europe, and, as the Guardian reported this week, key figures in the Catalan pro-independence movement in Spain. The Guardian also reported that more than a dozen Pakistani defence and intelligence officials were allegedly targeted in the attack. The Pakistani government did not confirm or deny the attacks.

The decision to allow the US lawsuit to proceed could pose a challenge to NSO Group’s government clients who have previously denied any association with the company, in case the judge forces the company to reveal its client list.

NSO Group earlier this week won a victory in an Israeli court after a judge rejected a legal case filed by Amnesty International that attempted to block the company from selling its cyber-weapons internationally.


Stephanie Kirchgaessner in Washington

The GuardianTramp

Related Content

Article image
Israeli firm linked to WhatsApp spyware attack faces lawsuit
Amnesty International fears its staff may be ‘surveilled via NSO Pegasus software’

Dan Sabbagh

18, May, 2019 @5:00 AM

Article image
Israeli spyware firm fails to get hacking case dismissed
Judge orders NSO Group to fight case brought by Saudi activist and pay his legal costs

Oliver Holmes and Stephanie Kirchgaessner

16, Jan, 2020 @10:27 AM

Article image
WhatsApp spyware attack was attempt to hack human rights data, says lawyer
NSO Group technology reportedly used against lawyer involved in civil case against the Israeli surveillance firm

Nick Hopkins and Dan Sabbagh

14, May, 2019 @12:27 PM

Article image
WhatsApp urges users to update app after discovering spyware vulnerability
The spyware, developed by Israeli cyber intelligence company, used infected phone calls to take over the functions of operating systems

Julia Carrie Wong

14, May, 2019 @7:21 AM

Article image
Israeli spyware allegedly used to target Pakistani officials' phones
WhatsApp hackers may have used NSO Group technology for ‘state-on-state’ espionage

Stephanie Kirchgaessner in Washington

19, Dec, 2019 @1:56 PM

Article image
WhatsApp spyware attack: senior clergymen in Togo among activists targeted
Bishop from Togo among 1,400 individuals alerted by WhatsApp to malware attack

Stephanie Kirchgaessner and Jennifer Rankin

03, Aug, 2020 @10:40 AM

Article image
WhatsApp sues Israeli firm, accusing it of hacking activists' phones
NSO Group’s spyware allegedly used in cyber-attacks on lawyers and journalists

Nick Hopkins and Stephanie Kirchgaessner

29, Oct, 2019 @9:49 PM

Article image
Israeli spyware company NSO Group placed on US blacklist
Decision against company at heart of Pegasus project reflects deep concern about impact of spyware on US national security interests

Stephanie Kirchgaessner in Washington

03, Nov, 2021 @7:53 PM

Article image
CEO of Israeli Pegasus spyware firm NSO to step down
CEO Shalev Hulio is stepping down as part of NSO reorganisation that will see it focus on sales in Nato member countries

Staff and agencies

21, Aug, 2022 @11:50 PM

Article image
Israeli firm’s spyware linked to attacks on websites in UK and Middle East
Canada-based researchers say new evidence suggests Candiru’s software used to target critics of autocratic regimes

Stephanie Kirchgaessner in Washington

16, Nov, 2021 @4:15 PM