Facebook tried to buy NSO Group's Pegasus spyware to monitor iOS users

Social network wanted to integrate surveillance tech into its Onavo Protect app

Facebook once tried to buy the Israeli spyware group NSO Group it’s suing due to its alleged involvement in a massive WhatsApp hack last year, documents from an ongoing court case show. 

NSO Group, which develops surveillance tools for government agencies, was accused of developing the Pegasus spyware tool that was at the heart of a significant attack against WhatsApp between April and May 2019.

The incident saw the communications and location data of 1,400 users, including high-profile targets like government and military officials, intercepted and tracked through the exploitation of a flaw in the platform.

Documents from the lawsuit, however, reveal the social network approached NSO Group in 2017 in order to use the very same technology to more effectively monitor iOS users.

Facebook had also hoped to embed this tool into the Onavo Protect app, developed by the Israeli security firm Onavo which it purchased in 2013. 

Onavo, some months after the attempted purchase of NSO Group, found itself in the middle of a war between Apple and Facebook centring on privacy and the monitoring of iOS users.

Onavo Protect, a virtual private network (VPN) app widely regarded as spyware, tracked the usage of all apps installed on iOS devices, which contravened Apple’s privacy rules after these were revamped in 2018.

Facebook voluntarily delisted the app following discussions between the two companies and was also removed from the Google Play Store.

Then, in early 2019, Apple took the drastic measure of stripping Facebook of its development license altogether after the firm was found to be marketing its newly-developed Research app, which bore staggering similarities with Onavo Protect, to children.

The attempted acquisition of NSO Group - and effort to seize Pegasus - arose because Facebook was concerned that its method for gathering user data through Onavo Protect was less effective on iOS devices than Android devices.

The connection between NSO Group and Onavo, as well as Facebook’s ambitions to use the Pegasus technology to render iOS tracking far more potent, was hidden until it was revealed in the court documents.

When the acquisition attempt failed, Facebook even approached NSO Group to solicit its services through Pegasus technology to further monitor Onavo Protect users, for a per-user fee to be paid monthly.

This approach was also rejected, as NSO Group only solicits its technology to government agencies, security services and law enforcement agencies. 

Employees from NSO Group, incidentally, sued Facebook last November for allegedly blocking their private WhatsApp accounts, as well as the Facebook and Instagram accounts of their friends and family members.

Featured Resources

Preparing for AI-enabled cyber attacks

MIT technology review insights

Download now

Cloud storage performance analysis

Storage performance and value of the IONOS cloud Compute Engine

Download now

The Forrester Wave: Top security analytics platforms

The 11 providers that matter most and how they stack up

Download now

Harness data to reinvent your organisation

Build a data strategy for the next wave of cloud innovation

Download now

Recommended

Senator wants social media companies held liable for spreading anti-vax lies
social media

Senator wants social media companies held liable for spreading anti-vax lies

23 Jul 2021
Apple reportedly planning all-5G iPhone lineup for 2022
Hardware

Apple reportedly planning all-5G iPhone lineup for 2022

21 Jul 2021
Apple reportedly delays return to the office amid rising COVID cases
Careers & training

Apple reportedly delays return to the office amid rising COVID cases

20 Jul 2021
Facebook asks FTC chair to recuse herself from antitrust case
social media

Facebook asks FTC chair to recuse herself from antitrust case

14 Jul 2021

Most Popular

UK gov considers blocking Nvidia's takeover of Arm
Acquisition

UK gov considers blocking Nvidia's takeover of Arm

4 Aug 2021
RMIT to be first Australian university to implement AWS supercomputing facility
high-performance computing (HPC)

RMIT to be first Australian university to implement AWS supercomputing facility

28 Jul 2021
Preparing for AI-enabled cyber attacks
Whitepaper

Preparing for AI-enabled cyber attacks

22 Jul 2021