NSO Group‘s Penalty in Meta Lawsuit Significantly Reduced, Despite Ban on Targeting WhatsApp
Table of Contents
A U.S. federal judge has dramatically lowered the financial penalty against Israeli cyberintelligence firm NSO Group in a lawsuit brought by Meta (formerly Facebook),while simultaneously upholding a ban preventing the company from targeting WhatsApp users. The ruling comes after a jury initially determined NSO Group should pay Meta over $167 million in damages for a 2019 spyware campaign.
background: The 2019 WhatsApp Spyware Campaign
In 2019, NSO Group used its Pegasus spyware to target over 1,400 WhatsApp users globally, including human rights activists, journalists, and other civil society figures.This campaign exploited a vulnerability in WhatsApp’s video calling feature to install the spyware on target devices,allowing NSO Group’s clients to access messages,calls,and other sensitive data. Meta filed a lawsuit against NSO Group in 2020, alleging the company intentionally developed and sold tools used to surveil WhatsApp users. A jury sided with Meta earlier this year, awarding damages exceeding $167 million.
Judge Reduces Damages, Cites Insufficient Evidence of “Egregious” Conduct
U.S. District Judge Phyllis Hamilton ruled on October 11, 2024, that the punitive damages awarded to Meta were excessive. The judge found that the court lacked sufficient evidence to establish that NSO Group’s behavior was “especially egregious,” a standard required for a higher punitive damages ratio. As a result, the punitive damages ratio was capped at 9 to 1, reducing the total payment to approximately $4 million.
The original jury award included both compensatory and punitive damages. Compensatory damages are intended to cover actual losses, while punitive damages are meant to punish the defendant for particularly harmful conduct and deter similar behavior in the future.
Ban on Targeting WhatsApp Remains in Place
Despite the reduction in the financial penalty, Judge Hamilton’s ruling maintains the crucial injunction preventing NSO Group from targeting WhatsApp and its users. WhatsApp Head Will Cathart stated that the ruling “bans spyware maker NSO from ever targeting WhatsApp and our global users again.” He further applauded the decision, emphasizing its importance after six years of litigation aimed at holding NSO Group accountable for targeting members of civil society.
NSO Group Acquisition by U.S. Investors
The ruling comes as NSO Group is undergoing a change in ownership.The company recently confirmed its acquisition by a group of U.S. investors. This acquisition is seen by some as an attempt to distance the company from its controversial past and perhaps navigate U.S. export controls more effectively. The U.S. Department of Commerce has placed NSO Group on its Entity List,restricting its access to U.S. technology.
Key Takeaways
* Reduced Penalty: The financial penalty against NSO Group has been significantly reduced from over $167 million to approximately $4 million.
* Targeting Ban Upheld: NSO Group remains banned from targeting WhatsApp and its users.
* Ownership Change: NSO Group has been acquired by U.S. investors.
* Continued Scrutiny: The company continues to face scrutiny over its Pegasus spyware and its use by governments worldwide.
What is pegasus Spyware?
Pegasus is a sophisticated spyware developed by NSO Group. It is indeed designed to remotely access and extract data from smartphones,including messages,calls,emails,photos,and location data. Pegasus can also activate a phone’s camera and microphone to record audio and video. The spyware is typically deployed through “zero-click” exploits, meaning it can infect a device without any interaction from the user, such as clicking a malicious link. Citizen Lab has been a leading researcher documenting the use of Pegasus against journalists, activists, and political figures.
Looking Ahead
The reduced financial penalty represents a setback for meta in its pursuit of full accountability from NSO Group. Though, the continued ban on targeting WhatsApp users remains a significant victory. The acquisition of NSO Group by U.S. investors raises questions about the future direction of the company and whether it will adopt more responsible practices. The ongoing debate surrounding the use and regulation of spyware like Pegasus is
Keep reading