Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order

Summary

Meta has announced the detection and blocking of spear-phishing attempts originating from NSO Group, a known Israeli spyware vendor. The tech giant is also seeking a federal court contempt order against NSO Group for allegedly violating a previous injunction that prohibited them from targeting WhatsApp users.

IFF Assessment

FOE

This is bad news for defenders as it highlights the ongoing sophisticated phishing activities by a known spyware vendor, indicating continued threats to user privacy and security.

Defender Context

This incident highlights the persistent threat of advanced phishing campaigns by sophisticated actors like NSO Group, which often leverage social engineering tactics. Defenders should remain vigilant against spear-phishing attempts, particularly those urging users to click on external links, and reinforce user education on identifying and reporting suspicious communications.

Read Full Story →