WhatsApp Blocks Pegasus Spyware Campaign Linked to NSO Group

WhatsApp disclosed and disrupted a targeted Pegasus spyware campaign attributed to NSO Group that used spear-phishing one-click links redirecting victims to external malicious domains (e.g., ikhwancast.com, ghazacast.com, fr24cast.com). The company removed attacker infrastructure, released IOCs to aid detection, and has petitioned the court to hold NSO in contempt while funding forensic and victim-assistance initiatives; the report emphasizes that endpoint compromise bypasses end-to-end encryption and highlights ongoing multi-vector, high-risk surveillance-for-hire activity.