[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHZO4nAk1LQm0yq7SidcGfc9Ag7gwigby3X5NzCjKXfk":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":18,"status":19,"created_at":20,"published_at":21,"article":22,"tags":26,"podcasts":39,"controls":40},"ab6bce8d-b82f-4df1-aaf7-a4132e184b00","court-ordered-spyware-ban-violated-through-social-engineering-attack","9b7a6639-b2e2-40b5-8554-cc56dbe01ca8","Court-Ordered Spyware Ban Violated Through Social Engineering Attack","NSO Group allegedly violated a federal court injunction by continuing to target WhatsApp users through social engineering attacks, despite being legally prohibited from such activities. This incident demonstrates how threat actors may persist in their malicious activities even when facing legal consequences, requiring organizations to maintain continuous vigilance and detection capabilities. The case highlights the importance of robust vulnerability management and incident response procedures to detect and respond to sophisticated attacks from well-resourced adversaries.","**Immediate actions:**\n- Implement enhanced monitoring for social engineering attempts targeting your messaging platforms\n- Review and strengthen user authentication mechanisms for all communication applications\n- Conduct emergency security assessments of client-facing applications\n\n**Long-term improvements:**\n- Establish continuous vulnerability scanning and threat intelligence programs\n- Develop legal incident response procedures for court-ordered security violations\n- Create user education programs focused on social engineering attack recognition\n\n**Detection measures:**\n- Deploy behavioral analytics to identify unusual communication patterns\n- Implement real-time monitoring for known spyware indicators and techniques\n- Establish threat hunting capabilities specifically for advanced persistent threats",[12,13,14,15,16,17],"CIS Control 7","CIS Control 16","NIST IR-4","NIST IR-8","NIST RA-5","ISO 27035",{},"published","2026-06-08T14:20:27.830261+00:00","2026-06-08T14:20:27.731+00:00",{"id":7,"url":23,"slug":24,"title":25},"https:\u002F\u002Fwww.securityweek.com\u002Fwhatsapp-catches-spyware-firm-nso-defying-no-hacking-court-order\u002F","whatsapp-catches-spyware-firm-nso-defying-no-hacking-court-order-c606e0","WhatsApp Catches Spyware Firm NSO Defying No-Hacking Court Order",[27,33],{"id":28,"name":29,"slug":30,"description":31,"color":32},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":34,"name":35,"slug":36,"description":37,"color":38},"182e11d5-57c4-444e-8ec8-4682ad60261b","Incident Response","incident-response","Slow detection, poor containment, missing playbooks","#14b8a6",[],[41,45,49],{"slug":42,"name":43,"problem":44},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":46,"name":47,"problem":48},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",{"slug":50,"name":51,"problem":52},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them."]