IC Technology & Surveillance — 2026-06-08

Meta Accuses NSO Group of Violating Court Injunction With New Pegasus Spyware Campaign

BLUFMeta's contempt filing opens a path to court-imposed sanctions that could collapse NSO Group's viability, and the disclosed domain indicators confirm the company never altered its targeting profile despite five years of litigation.

Meta on Monday filed a federal contempt complaint against NSO Group, alleging the Israeli spyware maker violated a permanent injunction by running spear-phishing operations against WhatsApp users 123. Meta said it disrupted 1-click phishing attempts designed to redirect users to external sites via malicious links, and identified and removed test accounts and groups NSO had created on the platform 24. Three domains associated with the campaign, fr24cast[.]com, ghazacast[.]com, and ikhwancast[.]com, were released as threat indicators 2. Meta said the activity resembled prior NSO-linked targeting of journalists and activists in Jordan between 2019 and 2023; NSO Group did not respond to requests for comment from multiple outlets 13.

Analysis
The contempt filing is Meta's sharpest legal lever against NSO's concurrent bid to exit the Entity List. A contempt finding could, by NSO's own admission, force the company to shut down. Combined with the pending appeal and a civil society amicus coalition, the motion narrows NSO's room on both legal tracks simultaneously. Domain indicators ghazacast[.]com and ikhwancast[.]com suggest no operational change from the Jordan 2019–2023 target set, with Gaza-adjacent and Muslim Brotherhood-linked communications still in scope. NSO could counter that a licensed operator conducted the attributed activity, exploiting an attribution gap Meta's filing does not close. The entire record rests on Meta's own newsroom announcement; five specialist outlets cite the same source, providing no independent corroboration.
6 sources
  1. Meta accuses NSO Group of defying spyware injunction, files contempt of court complaint - CyberScoop
  2. Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order - The Hacker News
  3. Meta to take legal action against Israeli spyware firm NSO, foils phishing attacks - Reuters
  4. Meta claims NSO Group still targets WhatsApp users despite court order - Help Net Security
  5. NSO Group back in Meta's crosshairs after alleged WhatsApp targeting - The Register
  6. Fighting Spyware: An Update From WhatsApp - Meta (WhatsApp Newsroom)

View in full brief →

UNCLASSIFIED // OPEN SOURCE