WhatsApp Says It Blocked Pegasus Spyware Campaign Linked to NSO
ID: 8d061e4d-beed-594a-a1df-5b9e7eb7c8ec
STIX ID: report--8d061e4d-beed-594a-a1df-5b9e7eb7c8ec
Feed Name: HackRead
Threat Score
WhatsApp says it disrupted a new spyware-related campaign linked to NSO Group that used spear-phishing to push victims to malicious external domains (fr24cast.com, ghazacast.com, ikhwancast.com), removed test accounts/groups on its platform, and asked a US court to hold NSO in contempt of a prior injunction; the activity did not rely on a WhatsApp zero-day and highlights ongoing risks from mercenary spyware.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.