NSO CEO claims Facebook wanted NSO surveillance tool to spy on users

A new shocking revelation comes from the disputed from NSO Group and Facebook, NSO CEO claims Facebook tried to buy an Apple spying software in 2017.

Reading this post you could have a better idea of the value of your privacy.

In October 2019, WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users.

In May, Facebook has patched a critical zero-day vulnerability in WhatsApp, tracked as CVE-2019-3568, that has been exploited to remotely install spyware on phones by calling the targeted device.

Now new disconcerting details are emerging from the dispute between the two companies.

According to an extraordinary court filing from NSO Group in an ongoing lawsuit. Facebook representatives contacted the surveillance firm to buy a tool that could help the social network giant to better monitor a subset of its users,

NSO developed and sell licenses for the use of surveillance spyware known as Pegasus , which is able to steal any kind of data from smartphones and use them to spy on the surrounding environment through their camera and microphone.

The NSO Group operated in the dark for several years, until the researchers from the Citizenlab organization and the Lookout firm spotted its software in targeted attacks against UAE human rights defender, Ahmed Mansoor.

The researchers also spotted other attacks against a Mexican journalist who reported to the public a story of the corruption in the Mexican government.

Now NSO CEO Shalev Hulio revealed the the embarrassing contact with the Facebook representatives.

“According to a declaration from NSO CEO Shalev Hulio, two Facebook representatives approached NSO in October 2017 and asked to purchase the right to use certain capabilities of Pegasus.” reported Motherboard, the media outlet that disclosed the story.

Court documents revealed that Facebook representatives were interested in effectively monitor mobile devices of users who had already installed Onavo, a VPN product developed by Facebook that analyzed the web traffic of users who downloaded it to monitor other apps installed by the users.

According to the NSO CEO, Facebook was interested in improving surveillance capabilities on iOS devices of the Onavo Protect.

Spying and Surveillance

NSO CEO revealed that his company did not provide the surveillance service to Facebook because it is a private business and therefore does not meet company’s customer criteria

“The Facebook representatives stated that Facebook was concerned that its method for gathering user data through Onavo Protect was less effective on Apple devices than on Android devices. The Facebook representatives also stated that Facebook wanted to use purported capabilities of Pegasus to monitor users on Apple devices and were willing to pay for the ability to monitor Onavo Protect users. Facebook proposed to pay NSO a monthly fee for each Onavo Protect user.”the court filing reads. “Facebook is a private entity and not a sovereign government or government agency for national security and law enforcement purposes and therefore does not meet NSO’s customer criteria”

In 2019 the Onavo Protect was removed from the App Store by Apple, and Facebook decided to also remove it from Google Play.

Facebook attempted to downplay the accusation and speculate that NSO is attempting to distract from the accusation moved by the social network giant.

“NSO is trying to distract from the facts Facebook and WhatsApp filed in court nearly six months ago. Their attempt to avoid responsibility includes inaccurate representations about both their spyware and a discussion with people who work at Facebook,” a Facebook spokesperson said.

“Our lawsuit describes how NSO is responsible for attacking over 100 human rights activists and journalists around the world. NSO CEO Shalev Hulio has admitted his company can attack devices without a user knowing and he can see who has been targeted with Pegasus. We look forward to proving our case against NSO in court and seeking accountability for their actions.”

Who will win? Facebook or NSO Group?

I don’t know, but I’m sure that the losers are the unaware users.

Pierluigi Paganini

FAIR USE NOTICE: Under the "fair use" act, another author may make limited use of the original author's work without asking permission. Pursuant to 17 U.S. Code § 107, certain uses of copyrighted material "for purposes such as criticism, comment, news reporting, teaching (including multiple copies for classroom use), scholarship, or research, is not an infringement of copyright." As a matter of policy, fair use is based on the belief that the public is entitled to freely use portions of copyrighted materials for purposes of commentary and criticism. The fair use privilege is perhaps the most significant limitation on a copyright owner's exclusive rights. Cyber Defense Media Group is a news reporting company, reporting cyber news, events, information and much more at no charge at our website Cyber Defense Magazine. All images and reporting are done exclusively under the Fair Use of the US copyright act.

Global InfoSec Awards 2022

We are in our 10th year, and these awards are incredibly well received – helping build buzz, customer awareness, sales and marketing growth opportunities, investment opportunities and so much more.


10th Anniversary Exclusive Top 100 CISO Conference & Innovators Showcase