5/5 🧵 For privacy and crypto people, this is the punchline: if attackers compromise the person instead of the protocol, “secure app” branding only gets you so far. Pegasus-style operations hitting people around wallets, seed phrases, deal flow, or private coordination can translate into instant financial damage. If the court finds NSO in contempt, Meta could push for more fines or tighter sanctions — and that will test whether injunctions against spyware firms actually have teeth. 📎 Source
4/5 🧵 The latest attacks reportedly didn’t rely on a new WhatsApp software flaw. They used social engineering: malicious links, fake lures, classic spear-phishing. That distinction matters. Encryption protects message contents in transit; it does not protect users who are manipulated into handing access over. So the article’s core point is simple: strong cryptography is necessary, but it’s not a magic shield against targeted deception. Source
3/5 🧵 The backstory is brutal. In 2019, WhatsApp discovered NSO spyware had compromised more than 1,400 devices. Meta sued, and by December 2024 NSO was found liable under the Computer Fraud and Abuse Act for unauthorized access to WhatsApp’s servers. Damages were later set at about $4 million. Not huge money, honestly, but the permanent injunction was the bigger weapon because it created a legal line NSO allegedly crossed again. 📎 Source
2/5 🧵 Meta says NSO violated a permanent court injunction by running fresh spear-phishing campaigns against WhatsApp users. The complaint, filed June 8, targets NSO Group Technologies and Q Cyber Technologies and ties the activity to Pegasus, NSO’s surveillance toolkit. That’s the key escalation: this allegedly happened after a court already told them to stop.
1/5 🧵 Meta’s new move against NSO matters because this isn’t about “breaking encryption” — it’s about going around it. WhatsApp’s end-to-end encryption appears intact. The real problem is older and uglier: trick the human, own the phone, read everything anyway.
5/5 🧵 For privacy and crypto people, this is the punchline: if attackers compromise the person instead of the protocol, “secure app” branding only gets you so far. Pegasus-style operations hitting people around wallets, seed phrases, deal flow, or private coordination can translate into instant financial damage. If the court finds NSO in contempt, Meta could push for more fines or tighter sanctions — and that will test whether injunctions against spyware firms actually have teeth. 📎 Source
#threadstorm
4/5 🧵 The latest attacks reportedly didn’t rely on a new WhatsApp software flaw. They used social engineering: malicious links, fake lures, classic spear-phishing. That distinction matters. Encryption protects message contents in transit; it does not protect users who are manipulated into handing access over. So the article’s core point is simple: strong cryptography is necessary, but it’s not a magic shield against targeted deception. Source
3/5 🧵 The backstory is brutal. In 2019, WhatsApp discovered NSO spyware had compromised more than 1,400 devices. Meta sued, and by December 2024 NSO was found liable under the Computer Fraud and Abuse Act for unauthorized access to WhatsApp’s servers. Damages were later set at about $4 million. Not huge money, honestly, but the permanent injunction was the bigger weapon because it created a legal line NSO allegedly crossed again. 📎 Source
2/5 🧵 Meta says NSO violated a permanent court injunction by running fresh spear-phishing campaigns against WhatsApp users. The complaint, filed June 8, targets NSO Group Technologies and Q Cyber Technologies and ties the activity to Pegasus, NSO’s surveillance toolkit. That’s the key escalation: this allegedly happened after a court already told them to stop.
1/5 🧵 Meta’s new move against NSO matters because this isn’t about “breaking encryption” — it’s about going around it. WhatsApp’s end-to-end encryption appears intact. The real problem is older and uglier: trick the human, own the phone, read everything anyway.