The June 2026 Contempt Filing
On June 8, 2026, Meta filed a contempt of court motion in the U.S. District Court for the Northern District of California, alleging that NSO Group — the Israeli spyware maker behind Pegasus — violated a permanent injunction issued just eight months earlier. According to Meta, WhatsApp "caught and disrupted spear phishing attempts linked to NSO" in which attackers sent malicious links designed to direct users to external websites; NSO-linked actors also created and operated test accounts and groups on the platform before they were removed. Reports indicate the campaign targeted fewer than ten users, primarily in Jordan and Lebanon — countries where Pegasus infections have been documented since at least 2019.
If the allegations hold, they are significant not because NSO's conduct is novel — the company's client misuse record spans three continents and five years of litigation — but because it allegedly continued while NSO was under a federal court order that the company itself acknowledged "jeopardizes NSO's principal product, Pegasus, which represented 100 percent of NSO's sales in 2025."
The Verdict That Came and Went
The 2025 trial produced one of the most significant accountability moments in commercial spyware history. In May 2025, a jury found NSO liable for unlawfully exploiting a WhatsApp vulnerability to install Pegasus on roughly 1,400 users' phones across 20 countries — a 2019 campaign that triggered the original lawsuit. The jury awarded Meta $167 million in punitive damages plus $444,000 in compensatory damages.
Then, in October 2025, U.S. District Judge Phyllis Hamilton reduced the punitive award to just over $4 million, citing the absence of sufficient case law in smartphone-era electronic surveillance to support a higher ratio. The reduction was striking: NSO's conduct was found unlawful, its technology called a source of "irreparable harm," yet the final financial penalty amounted to roughly 2.4 percent of what the jury imposed. Judge Hamilton did issue a permanent injunction barring NSO from hacking WhatsApp, reverse-engineering its code, creating new accounts on the platform, or retaining any WhatsApp source code — with all such material ordered deleted and destroyed.
Less than three months later, according to Meta's contempt filing, NSO was allegedly running new phishing campaigns against WhatsApp users anyway.
The Rebranding That Hasn't Changed the Business
The contempt filing lands during what NSO has positioned as a strategic reinvention. In October 2025, U.S.-based investors led by Hollywood producer Robert Simonds acquired a controlling stake in the company, erasing $600 million in debt and ending the tenure of NSO's Israeli co-founders. In November 2025, former U.S. Ambassador to Israel David Friedman — a Trump administration appointment — was named executive chairman, with the stated goal of winning U.S. government contracts and securing removal from the Commerce Department's Entity List, where NSO has sat since November 2021 over documented surveillance of journalists, activists, and government officials.
The company's 2025 transparency report, released in January 2026, framed this as a "new phase of accountability." Digital rights researchers were unconvinced. Access Now's Natalia Krapiva called it "nothing but another attempt at window dressing," while Citizen Lab's John Scott-Railton noted that "nothing in this document allows outsiders to verify NSO's claims." Critically, the 2025 report omitted metrics NSO had previously disclosed: total customer count, the number of client investigations opened, and customers terminated for human rights violations. Prior reports had listed concrete figures — six customers suspended between 2022 and 2023, three investigations opened in 2024, $20 million in rejected contracts. The 2026 iteration offers none of this.
Israel's Export Regime Under Pressure
The strongest case for NSO's continued operation rests on Israel's export oversight framework. Pegasus is classified as a weapon under Israeli law, and every export must be licensed by the Defense Exports Control Agency (DECA). After the Pegasus Project in 2021 exposed systematic misuse across Mexico, India, Saudi Arabia, and elsewhere, Israel tightened those controls and required client governments to pledge in writing that Pegasus would be used only for terrorism and serious crime investigations, with potential sanctions for violations.
This is a real constraint, not a fig leaf. There is a legitimate argument that calibrated export licensing by a functioning defense establishment is a more proportionate tool than blanket prohibition of technology with genuine law enforcement applications.
That argument has not aged well. In January 2026, Spain's High Court permanently closed an investigation into Pegasus surveillance of Prime Minister Pedro Sánchez — whose phone was reportedly infected five separate times — after Israel declined five consecutive international cooperation requests. Judge José Luis Calama described Israel's non-cooperation as "a manifest breach of its international obligations." Amnesty International has separately alleged that Israeli authorities actively sought to suppress disclosures arising from NSO-related legal proceedings.
An export regime that stonewalls allied courts is not one that inspires confidence in its oversight function.
What Accountability Actually Requires
The right frame here is not whether NSO should face oversight — it unambiguously should — but whether the current combination of U.S. courts, Israeli export controls, and commercial pressure can produce deterrence that precedes violations rather than merely responding to them.
The U.S. court system has generated more accountability than any other mechanism: a liability finding, a permanent injunction, and now contempt proceedings within months of an alleged breach. But the financial stakes remain low — $4 million for a company that generates all its revenue from a single product. A successful contempt motion could change that calculus significantly.
The US ownership restructuring creates a theoretically useful jurisdictional anchor: U.S. courts can now reach a US-controlled entity more directly. But as long as NSO's operational hub and export licensing remain within Israel's Ministry of Defense — which has declined to cooperate with allied judicial systems — the dual-jurisdiction structure risks producing two oversight regimes that each defer to the other and together produce less accountability than either would alone.
The June 2026 contempt filing is, in one reading, a sign the system is working: WhatsApp detected the campaign, Meta moved rapidly to court, and the evidentiary record is building. In another, it confirms that catching violations after the fact is a fundamentally different thing from preventing them. NSO's so-called new chapter looks, from the outside, like the same book.