{"id":57700,"date":"2024-11-18T14:59:09","date_gmt":"2024-11-18T14:59:09","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/36607\/NSO-Operates-Its-Spyware-Legal-Documents-Reveal.html"},"modified":"2024-11-18T14:59:09","modified_gmt":"2024-11-18T14:59:09","slug":"nso-operates-its-spyware-legal-documents-reveal","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/","title":{"rendered":"NSO Operates Its Spyware, Legal Documents Reveal"},"content":{"rendered":"
<\/div>\n

Legal documents released in ongoing US litigation between NSO Group and WhatsApp<\/a> have revealed for the first time that the Israeli cyberweapons maker \u2013 and not its government customers \u2013 is the party that \u201cinstalls and extracts\u201d information from mobile phones targeted by the company\u2019s hacking software.<\/p>\n

The new details were contained in sworn depositions from NSO Group employees, portions of which were published for the first time on Thursday.<\/p>\n

It comes five years after WhatsApp, the popular messaging app owned by Facebook, first announced it was filing suit against NSO. The company, which was blacklisted<\/a> by the Biden administration in 2021, makes what is widely considered the world\u2019s most sophisticated hacking software, which \u2013 according to researchers \u2013 has been used in the past in Saudi Arabia, Dubai, India, Mexico, Morocco and Rwanda.<\/p>\n

The timing of the latest development is important in the wake of Donald Trump\u2019s victory in the 2024 presidential election. Pegasus has been used by autocratic leaders around the world to target journalists and dissidents, including by the government of Viktor Orb\u00e1n, who Trump admires<\/a>.<\/p>\n

NSO has lobbied members of Congress in an attempt to be removed from the Biden administration\u2019s so-called blacklist, and Trump\u2019s return to the White House could signify a change in White House policy on the use of spyware.<\/p>\n

WhatsApp filed suit in California<\/a> in 2019 after it revealed that it had discovered that 1,400 of its users \u2013 including journalists and human rights activists \u2013 had been targeted by the spyware over a two-week period.<\/p>\n

At the heart of the legal fight was an allegation by WhatsApp<\/a> that NSO had long denied: that it was the Israeli company itself, and not its government clients around the world, who were operating the spyware. NSO has always said that its product is meant to be used to prevent serious crime and terrorism, and that clients are obligated not to abuse the spyware. It has also insisted that it does not know who its clients are targeting.<\/p>\n

A spokesperson for NSO, Gil Lainer, said in a statement: \u201cNSO stands behind its previous statements in which we repeatedly detailed that the system is operated solely by our clients and that neither NSO nor its employees have access to the intelligence gathered by the system. We are confident that these claims, like many others in the past, will be proven wrong in court, and we look forward to the opportunity to do so.\u201d<\/p>\n

WhatsApp is seeking a summary judgment in the case, which means it is asking a judge to rule on the case now. NSO has opposed the motion.<\/p>\n

To make its case, WhatsApp was allowed by Judge Phyllis Hamilton to make its case, including citing depositions that have previously been redacted and out of public view.<\/p>\n

In one, an NSO employee said customers only needed to enter a phone number of the person whose information was being sought. Then, the employee said, \u201cthe rest is done automatically by the system\u201d. In other words, the process was not operated by customers. Rather NSO alone decided to access WhatsApp\u2019s servers when it designed (and continuously upgraded) Pegasus to target individuals\u2019 phones.<\/p>\n

<\/gu-island><\/figure>\n

A deposed NSO employee also acknowledged under questioning from WhatsApp lawyers that one known target of the company\u2019s spyware \u2013 Princess Haya of Dubai \u2013 was one of 10 examples of clients who had been \u201cabused\u201d \u201cso severely\u201d that NSO disconnected the service. The Guardian and its media partners first reported in 2021 that Haya and her associates were on a database of people who were of interest to a government client of NSO. A senior high court judge in the UK later ruled that the ruler of Dubai<\/a> hacked the phone of his ex-wife Princess Haya<\/a> using Pegasus spyware in an unlawful abuse of power and trust.<\/p>\n

The president of the family division found that agents acting on behalf of Sheikh Mohammed bin Rashid al-Maktoum<\/a>, who is also prime minister of the United Arab Emirates, a close Gulf ally of Britain, hacked Haya<\/a> and five of her associates while the couple were locked in court proceedings in London concerning the welfare of their two children.<\/p>\n

Those hacked included two of Haya\u2019s lawyers, one of whom, Fiona Shackleton, sits in the House of Lords and was tipped off about the hacking by Cherie Blair, who was working with NSO.<\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[60],"tags":[11111],"class_list":["post-57700","post","type-post","status-publish","format-standard","hentry","category-packet-storm","tag-headlinemalwarephoneisraelspywarefacebook"],"yoast_head":"\nNSO Operates Its Spyware, Legal Documents Reveal 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NSO Operates Its Spyware, Legal Documents Reveal 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2024-11-18T14:59:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i.guim.co.uk\/img\/media\/a9086ac4b525a788c040749a0cae93eb93715575\/0_223_6720_4032\/master\/6720.jpg?width=1200&height=630&quality=85&auto=format&fit=crop&overlay-align=bottom%2Cleft&overlay-width=100p&overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&enable=upscale&s=961cbd89318688f0c9095a5459e78fab\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"NSO Operates Its Spyware, Legal Documents Reveal\",\"datePublished\":\"2024-11-18T14:59:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/\"},\"wordCount\":729,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i.guim.co.uk\\\/img\\\/media\\\/a9086ac4b525a788c040749a0cae93eb93715575\\\/0_223_6720_4032\\\/master\\\/6720.jpg?width=1200&height=630&quality=85&auto=format&fit=crop&overlay-align=bottom%2Cleft&overlay-width=100p&overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&enable=upscale&s=961cbd89318688f0c9095a5459e78fab\",\"keywords\":[\"headline,malware,phone,israel,spyware,facebook\"],\"articleSection\":[\"Packet Storm\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/\",\"name\":\"NSO Operates Its Spyware, Legal Documents Reveal 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i.guim.co.uk\\\/img\\\/media\\\/a9086ac4b525a788c040749a0cae93eb93715575\\\/0_223_6720_4032\\\/master\\\/6720.jpg?width=1200&height=630&quality=85&auto=format&fit=crop&overlay-align=bottom%2Cleft&overlay-width=100p&overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&enable=upscale&s=961cbd89318688f0c9095a5459e78fab\",\"datePublished\":\"2024-11-18T14:59:09+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i.guim.co.uk\\\/img\\\/media\\\/a9086ac4b525a788c040749a0cae93eb93715575\\\/0_223_6720_4032\\\/master\\\/6720.jpg?width=1200&height=630&quality=85&auto=format&fit=crop&overlay-align=bottom%2Cleft&overlay-width=100p&overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&enable=upscale&s=961cbd89318688f0c9095a5459e78fab\",\"contentUrl\":\"https:\\\/\\\/i.guim.co.uk\\\/img\\\/media\\\/a9086ac4b525a788c040749a0cae93eb93715575\\\/0_223_6720_4032\\\/master\\\/6720.jpg?width=1200&height=630&quality=85&auto=format&fit=crop&overlay-align=bottom%2Cleft&overlay-width=100p&overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&enable=upscale&s=961cbd89318688f0c9095a5459e78fab\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nso-operates-its-spyware-legal-documents-reveal\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,malware,phone,israel,spyware,facebook\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinemalwarephoneisraelspywarefacebook\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"NSO Operates Its Spyware, Legal Documents Reveal\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NSO Operates Its Spyware, Legal Documents Reveal 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/","og_locale":"en_US","og_type":"article","og_title":"NSO Operates Its Spyware, Legal Documents Reveal 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2024-11-18T14:59:09+00:00","og_image":[{"url":"https:\/\/i.guim.co.uk\/img\/media\/a9086ac4b525a788c040749a0cae93eb93715575\/0_223_6720_4032\/master\/6720.jpg?width=1200&height=630&quality=85&auto=format&fit=crop&overlay-align=bottom%2Cleft&overlay-width=100p&overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&enable=upscale&s=961cbd89318688f0c9095a5459e78fab","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"NSO Operates Its Spyware, Legal Documents Reveal","datePublished":"2024-11-18T14:59:09+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/"},"wordCount":729,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/#primaryimage"},"thumbnailUrl":"https:\/\/i.guim.co.uk\/img\/media\/a9086ac4b525a788c040749a0cae93eb93715575\/0_223_6720_4032\/master\/6720.jpg?width=1200&height=630&quality=85&auto=format&fit=crop&overlay-align=bottom%2Cleft&overlay-width=100p&overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&enable=upscale&s=961cbd89318688f0c9095a5459e78fab","keywords":["headline,malware,phone,israel,spyware,facebook"],"articleSection":["Packet Storm"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/","url":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/","name":"NSO Operates Its Spyware, Legal Documents Reveal 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/#primaryimage"},"thumbnailUrl":"https:\/\/i.guim.co.uk\/img\/media\/a9086ac4b525a788c040749a0cae93eb93715575\/0_223_6720_4032\/master\/6720.jpg?width=1200&height=630&quality=85&auto=format&fit=crop&overlay-align=bottom%2Cleft&overlay-width=100p&overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&enable=upscale&s=961cbd89318688f0c9095a5459e78fab","datePublished":"2024-11-18T14:59:09+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/#primaryimage","url":"https:\/\/i.guim.co.uk\/img\/media\/a9086ac4b525a788c040749a0cae93eb93715575\/0_223_6720_4032\/master\/6720.jpg?width=1200&height=630&quality=85&auto=format&fit=crop&overlay-align=bottom%2Cleft&overlay-width=100p&overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&enable=upscale&s=961cbd89318688f0c9095a5459e78fab","contentUrl":"https:\/\/i.guim.co.uk\/img\/media\/a9086ac4b525a788c040749a0cae93eb93715575\/0_223_6720_4032\/master\/6720.jpg?width=1200&height=630&quality=85&auto=format&fit=crop&overlay-align=bottom%2Cleft&overlay-width=100p&overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&enable=upscale&s=961cbd89318688f0c9095a5459e78fab"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/nso-operates-its-spyware-legal-documents-reveal\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,malware,phone,israel,spyware,facebook","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinemalwarephoneisraelspywarefacebook\/"},{"@type":"ListItem","position":3,"name":"NSO Operates Its Spyware, Legal Documents Reveal"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/57700","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=57700"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/57700\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=57700"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=57700"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=57700"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}