
NSO Group’s Pegasus spyware was deployed to target 1,223 WhatsApp users across 51 countries during a two-month hacking campaign in 2019, a newly surfaced court document has revealed.Â
The document is part of the ongoing lawsuit brought by WhatsApp, owned by Meta, against NSO Group. Â
The exhibit, published in the court filing, shows the geographical distribution of victims, shedding light on the global reach of this surveillance operation. Mexico topped the list with 456 victims, followed by India (100), Bahrain (82), Morocco (69), Pakistan (58), Indonesia (54), and Israel (51).Â
Notably, Western countries such as Spain, the Netherlands, and the United Kingdom also had victims, as well as the United States, where one individual was targeted.
While WhatsApp initially claimed 1,400 users were targeted in its 2019 complaint, the new list highlights 1,223 confirmed cases. This discrepancy emphasizes the potential for more unreported victims who were either not notified or chose not to publicize their experiences. Â
The victims included human rights activists, journalists, and other members of civil society, raising questions about privacy infringement and the misuse of surveillance technology. Â
The documented locations of victims do not necessarily implicate the governments of those countries as the perpetrators. For instance, Syria appears on the victim list, although NSO Group is prohibited from exporting its technology to the country due to international sanctions. Â
This level of targeting also hints at the financial aspect of NSO Group’s operations. Governments pay significant sums for surveillance tools like Pegasus, with reports indicating that Mexico alone spent over $60 million on the spyware. Â
The legal battle between WhatsApp and NSO Group has already delivered key revelations. Last year, a U.S. court ruled that NSO Group violated U.S. hacking laws. The court is now preparing to determine the damages NSO Group will have to pay to WhatsApp. Â
Other information disclosed through the lawsuit revealed that NSO Group earned at least $31 million in revenue in 2019 from its WhatsApp hacking tool, costing up to $6.8 million for a one-year license. The company also severed ties with 10 government customers accused of abusing the spyware.Â