In a court filing, CEO of NSO Group says Facebook representatives approached NSO in 2017 to buy parts of Pegasus to monitor phones of users who installed Onavo
Facebook representatives approached controversial surveillance vendor NSO Group to try and buy a tool that could help Facebook better monitor …
Context & Ripple Effects
This filing lands inside the litigation that began with WhatsApp's court documents accusing NSO of routing malware through US-based servers. NSO's counter is a tu-quoque defense: its CEO says Facebook's own representatives came shopping in 2017 for pieces of Pegasus to monitor phones of Onavo users — recasting the plaintiff as a would-be customer of the same capability.
The claim matters because it attacks the framing of the whole case. Facebook has positioned itself as a victim of spyware, but the filing suggests the platform's interest in device-level monitoring of its own user base — via Onavo — ran in the same direction as NSO's business. Weeks later, NSO escalated further with a fake site impersonating Facebook's security team to lure targets, showing how hostile the relationship became.
First-order effects
- Facebook's position as purely the aggrieved party in the WhatsApp case is undercut: if NSO's claim holds, Facebook sought to buy the very class of surveillance tool it is suing over, complicating its legal narrative and its public one.
- NSO gains a litigation talking point that shifts scrutiny onto Facebook's own monitoring practices around Onavo users, at no cost beyond the filing itself.
Second-order effects
- The allegation invites discovery into Facebook's internal deliberations about acquiring surveillance tooling, which — if it surfaces more evidence — would hand NSO ammunition and give other defendants in spyware cases a template for the same defense.
Third-order effects
- The pattern points toward platform-scale device monitoring and commercial spyware converging on the same capability, drawing regulators and courts into defining where consumer data collection ends and unlawful surveillance begins — a scrutiny NSO is already under from Israel's government investigation and Apple's federal suit as its financial troubles deepen.
The trend: Commercial spyware and platform data collection are converging on the same device-level monitoring capability, with courts — not regulators — currently setting the boundaries.