PhishingPublished 8 Jun 2026

WhatsApp says it disrupted new NSO spyware phishing attacks

Source Bleeping Computer

Description

WhatsApp has detected and stopped spear-phishing campaigns allegedly conducted by the NSO Group after investigating user reports of social engineering attacks. [...]

Impact

The attacks aimed to deliver spyware through phishing links, potentially compromising targeted users if successful. However, WhatsApp's end-to-end encryption protects message and call content from interception by spyware such as Pegasus. The disruption of these campaigns prevented the spread of NSO-linked spyware via WhatsApp. There is no indication of widespread exploitation or successful infections reported in this incident. The ongoing targeting by NSO Group despite legal restrictions underscores a persistent threat to high-interest individuals.

Defensive guidance

Meta has disrupted the phishing campaigns and removed malicious accounts and groups. Users are advised to keep WhatsApp and their device operating systems updated to benefit from the latest security protections. Android users should enable 'Advanced Protection' and iOS users should activate 'Lockdown Mode' to reduce the attack surface against spyware. End-to-end encryption remains effective against Pegasus spyware. No additional immediate actions are required beyond these recommendations.

References

bleepingcomputer.com/news/security/whatsapp-says-it-disrupted-new-nso-spyware-phishing-attacks/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 8 Jun 2026, 18:48 UTC

References

Community reviews