Sources: NSO Group is considering shuttering its Pegasus unit and selling the company, among other options, as it struggles to repay $450M in debt
- Moelis tapped to advise on talks with investment funds — One plan would repurpose product for strictly defensive use
Context & Ripple Effects
NSO's ownership history reads as a chain of failed exits: insiders say the founders bought back the 70% stake from Francisco Partners at a $1B valuation, and Blackstone later walked away from stake talks entirely. What was once a billion-dollar asset is now carrying $450M in debt it cannot service.
The strategic exits have fared no better than the financial ones: L3Harris explored acquiring NSO's core tech before the White House warned such a deal would raise serious security concerns, and the company has since been restructuring around NATO customers while its CEO steps down and roughly 100 jobs are cut. With human rights groups having documented Pegasus abuses against activists, Moelis is now brokering talks with investment funds over a sale, a Pegasus shutdown, or a pivot to strictly defensive use.
First-order effects
- NSO's creditors and the investment funds Moelis is negotiating with now hold the company's fate: repayment of the $450M depends on a sale, a Pegasus wind-down, or repositioning the product as a defensive-only tool.
- Pegasus unit staff face direct shutdown risk, while any surviving NSO would be a different company — one plan would strip the offensive spyware business that made its name.
Second-order effects
- The buyer pool has narrowed to whoever will absorb the reputational and legal exposure: with Washington having blocked the defense-contractor route, an FT investigation found executives weighing sales to risky clients — exactly the trade-off Moelis's fund talks must resolve.
- Survival economics are deteriorating for customers too: after the L3Harris collapse, NSO cut 15% of its workforce and raised prices roughly 20%, pushing its government clients to pay more for a product with a shrinking support base.
Third-order effects
- If the pattern holds — private equity exit, Blackstone walk-away, blocked L3Harris acquisition, debt distress — commercial offensive spyware becomes structurally unfinanceable as an independent Western-backed business, pushing surviving capability toward state-controlled or defense-integrated hands.
- A defensive-only repurposing of Pegasus would test whether surveillance tooling can be laundered into legitimacy by changing its customer profile, a precedent other spyware vendors under similar abuse scrutiny would likely follow.
The trend: Commercial spyware vendors are being forced out of independent existence — by debt, blocked acquisitions, and abuse exposure — toward state-aligned consolidation, defensive pivots, or shutdown.