WhatsApp v. NSO Group: NSO kept targeting WhatsApp users even after Meta sued, NSO spent $59M on R&D in 2024, and its customers pay $3M to $30M to use Pegasus
As part of the lawsuit and trial, a lot of details have come out about NSO and the cyberattack underpinning the lawsuit. X: Lorenzo Franceschi-Bicchierai / @lorenzofb : “We are struggling to keep our head above water,” NSO's CEO Yaron Shohat said during testimony. Instead, they have to pay $167 million. https://techcrunch.com/... LinkedIn: Lorenzo Franceschi-Bicchierai : We're still going through the hundreds of pages of transcripts and exhibits from the WhatsApp v. NSO trial. — We updated the post today with new details about NSO Group's finances. …
Context & Ripple Effects
The case has progressed from WhatsApp’s 2019 suit over attacks on 1,400 devices to court-ordered access to Pegasus source code and related spyware materials, then a liability finding and a nearly $168 million jury award. The trial disclosures add operational and financial detail to that legal arc.
They also follow evidence that Pegasus targeted 1,223 WhatsApp users across 51 countries in the 2019 campaign. That breadth makes NSO’s reported post-suit targeting and continued R&D spending relevant beyond the damages verdict.
First-order effects
- NSO faces a $167 million payment order while testimony portrays a company under financial strain, increasing pressure on its ability to fund operations and product development.
- The disclosures put NSO’s continuing WhatsApp targeting, 2024 R&D spending, and multi-million-dollar customer pricing into the litigation record, rather than leaving them as opaque vendor activity.
Second-order effects
- Existing and prospective Pegasus customers face greater scrutiny of whether a high-priced surveillance product can carry legal, operational, and reputational exposure for both vendor and buyer.
- Meta gains a stronger factual basis for using litigation and platform security controls together against spyware vendors, reinforcing the jury’s damages award as more than a symbolic victory.
Third-order effects
- If platforms can repeatedly convert exploit investigations into discovery, liability, and major damages, commercial spyware vendors may face a less sustainable model in which product secrecy no longer reliably shields deployment practices.
- The case points to expanding platform gatekeeper leverage: messaging providers can become effective chokepoints for imposing costs on firms that depend on exploiting their services, though the ultimate effect on customer demand remains uncertain.
The trend: Commercial spyware is moving from a largely opaque, customer-funded market toward one where platform litigation exposes its economics and raises the cost of operating it.