WhatsApp says it disrupted new NSO spyware phishing attacks
ID: 5f77e287-1a15-5a5a-b015-5e1fe2fd262c
STIX ID: report--5f77e287-1a15-5a5a-b015-5e1fe2fd262c
Feed Name: Bleeping Computer
Threat Score
Meta announced it disrupted NSO Group–linked spear-phishing attacks targeting WhatsApp users that used malicious links redirecting to external sites; WhatsApp removed test accounts and groups and published three domains (ikhwancast.com, ghazacast.com, fr24cast.com) as IOCs. The report references NSO’s Pegasus spyware, prior zero-day exploitation, U.S. sanctions and court rulings against NSO, and recommends updating apps and enabling platform hardening features (Advanced Protection / Lockdown Mode) to reduce exposure.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.