A US judge has ruled against Israeli spyware company, NSO Group, in a lawsuit brought by WhatsApp Inc. The lawsuit, which was filed four years ago, accuses NSO of being involved in a malware-hacking scheme. The judge, Phyllis Hamilton, rejected NSO's argument that American data transfer restrictions would hinder the company's ability to defend itself in the federal court in Oakland, California.
The lawsuit was brought by WhatsApp and its parent company, Facebook Inc., in 2019. They accused NSO of utilizing a vulnerability in the messaging service to install spyware on the phones of at least 1,400 users. At an earlier stage of the litigation, Facebook received support from tech giants such as Google Inc. and Microsoft Corp., who described NSO's cyber-surveillance tools as "dangerous."
NSO had argued that it was unfair to require the company to defend itself in the US. However, Judge Hamilton found NSO's arguments to be unpersuasive. She determined that NSO did not provide sufficient evidence of "bona fide restrictions" that would impede their access to evidence. Furthermore, the company failed to demonstrate how those restrictions would present fewer obstacles if the case were to proceed in Israel.
NSO Group has not yet provided any comment regarding the ruling. The lawsuit will now move forward in the US federal court in Oakland. This ruling marks a setback for NSO, as they had hoped to shift the proceedings to their home country.
The lawsuit against NSO Group highlights growing concerns surrounding cyber-surveillance activities and the use of spyware by entities around the world. The case has drawn attention from various tech companies and privacy advocates, who see it as a crucial battle for user privacy and the protection of digital rights.
While WhatsApp and Facebook have vowed to continue their fight against NSO, the outcome of this lawsuit will have important implications for the cybersecurity landscape. It will shed light on the responsibilities of spyware companies, the boundaries of surveillance practices, and the legal measures that can be taken against such entities.