WhatsApp Sues Israeli Spyware Maker NSO Over Mass Phone Hacking
WhatsApp files a federal lawsuit against NSO Group for allegedly developing malware that hacked 1,400 devices by exploiting an audio-calling vulnerability. The attack targets journalists and human rights defenders by infecting phones even when users do not answer the calls.
WhatsApp files a federal lawsuit in California accusing Israeli surveillance company NSO Group of creating malware that hacks into target devices. The malicious software exploits a vulnerability in the messaging app's audio-calling feature, allowing attackers to bypass end-to-end encryption by directly accessing data on the device itself.
The attack works by disguising malicious code as ordinary call settings, which injects spyware into the phone's memory even if the target does not answer the call. Once the initial code runs, it communicates with NSO Group's servers to download additional malware, giving the attackers complete access to the compromised device.
The lawsuit reveals that this exploit affects approximately 1,400 targeted users, including over 100 journalists, human rights defenders, and civil society members. WhatsApp traces the attack back to NSO Group through associated servers and specific WhatsApp accounts, stating that the company's attempts to cover its tracks are not entirely successful.