1. Who They Are
NSO Group is an Israeli surveillance company, maker of Pegasus — spyware that installs on a target's phone with no click required, harvests messages, photos and location, and silently activates the microphone and camera. It sells exclusively to governments. In late 2025 it was widely reported — including by Calcalist and US outlets — that an American investor group led by Hollywood producer Robert Simonds acquired controlling ownership.
2. What the Book Documents
"The Spyware That Murdered a Journalist": the book documents that Pegasus infected the phone of Washington Post columnist Jamal Khashoggi's circle before his October 2018 killing and dismemberment in the Saudi consulate in Istanbul, with surveillance data from the infection connected to the operation (book sources: Citizen Lab, University of Toronto; Washington Post, 2018–2019).
The Entity List: the US government placed NSO on its Entity List in November 2021, citing that NSO "developed and supplied spyware to foreign governments that used these tools to maliciously target government officials, journalists, businesspeople, activists, academics, and embassy workers" — while Israel, which controls NSO's export licenses, continued to allow it to operate because, the book argues, its tools serve Israeli intelligence and diplomatic interests. The book calls NSO the most visible node of the surveillance industrial complex — not the only one.
3. Verified Litigation Record — the WhatsApp Case, Reported in Full
| Date | Proceeding | Outcome | Basis | Status |
|---|---|---|---|---|
| Dec 2024 | WhatsApp/Meta v. NSO Group (N.D. Cal., Judge Phyllis Hamilton) | Liability ruling | NSO held liable for hacking ~1,400 WhatsApp users — journalists, human-rights activists, diplomats — via a zero-click exploit, violating the federal Computer Fraud and Abuse Act and California's computer-crime law | Adjudicated liability — a US court finding, not a settlement |
| May 6, 2025 | Same case — jury verdict | $444,719 compensatory + $167.25 million punitive | First jury verdict against a spyware maker for hacking a US platform | Verdict rendered; see reduction below |
| Oct 17, 2025 | Same case — post-trial ruling | Punitives reduced to ~$4 million; PERMANENT INJUNCTION issued | Judge Hamilton held the 376:1 punitive ratio unconstitutional, capping it at 9:1 — and permanently barred NSO from targeting WhatsApp, rejecting NSO's plea that the injunction would "force NSO out of business" | Injunction in force (it does not bind NSO's government customers and covers only WhatsApp); NSO welcomed the 97% damages cut and is weighing further appeal |
Sources: Bloomberg Law · Courthouse News (9:1 cap reasoning) · CyberScoop (injunction scope; US acquisition) · SecurityWeek (chronology)
4. The Full Record, Both Directions
For NSO: the punitive award was cut 97 percent because the judge found the record insufficient to establish "particularly egregious" conduct under the constitutional ratio test; Apple voluntarily dismissed its separate suit against NSO in September 2024, citing risks that litigation disclosures could aid spyware makers; and the injunction expressly does not apply to NSO's customers.
Against NSO: the underlying liability finding stands adjudicated — a US federal court held that NSO's business, as executed against 1,400 people including journalists and activists, violated American anti-hacking law; the Entity List designation remains; and the permanent injunction now makes targeting WhatsApp a contempt of court.
5. Associations Noted in the Book
The book situates NSO within the Unit 8200-to-industry pipeline documented across its chapters. Associations are noted for context; every company and person is documented on its own record.
Legal Disclaimer
This document is published as journalism and commentary in the public interest, protected as free speech and freedom of the press under the First Amendment to the United States Constitution, Article 19 of the Universal Declaration of Human Rights, and Article 10 of the European Convention on Human Rights. It compiles information from public records, court filings, government announcements, parliamentary and congressional investigations, and reporting by established news organizations, together with the documented first-person accounts and analysis published in the books No Ethics in Big Tech and Ethics in Tech and Lack Thereof by Vahid Razavi.
Where a fine, judgment, or settlement is described, its status (paid, under appeal, overturned, or pending) is stated as reported by the issuing authority or by reputable press as of the verification date above. Allegations in open lawsuits and investigations are exactly that — allegations — and every party is entitled to the presumption of innocence unless and until a competent court rules otherwise. Where a company or executive has prevailed in court, denied an allegation, or had a claim dismissed, that outcome is reported here as well, because the credibility of this project rests on stating the record in full. Opinions and characterizations drawn from the books are the protected opinion of the author. Corrections supported by documentation are welcome via NoEthicsInBigTech.com/contact.
Research Credit
Deep research, source verification, and document preparation for this fact sheet were performed by Claude, the AI assistant built by Anthropic, working under the direction of author Vahid Razavi. Every fine amount, case citation, and status line above was checked against the primary or press source listed beside it on the verification date. This is a living document; new rulings, fines, and investigations will be added as they are verified.