Facebook tried to buy NSO Group's Pegasus spyware to monitor iOS users

Facebook once tried to buy the Israeli spyware group NSO Group it’s suing due to its alleged involvement in a massive WhatsApp hack last year, documents from an ongoing court case show.

NSO Group, which develops surveillance tools for government agencies, was accused of developing the Pegasus spyware tool that was at the heart of a significant attack against WhatsApp between April and May 2019.

The incident saw the communications and location data of 1,400 users, including high-profile targets like government and military officials, intercepted and tracked through the exploitation of a flaw in the platform.

Documents from the lawsuit, however, reveal the social network approached NSO Group in 2017 in order to use the very same technology to more effectively monitor iOS users.

Facebook had also hoped to embed this tool into the Onavo Protect app, developed by the Israeli security firm Onavo which it purchased in 2013.

Onavo, some months after the attempted purchase of NSO Group, found itself in the middle of a war between Apple and Facebook centring on privacy and the monitoring of iOS users.

Onavo Protect, a virtual private network (VPN) app widely regarded as spyware, tracked the usage of all apps installed on iOS devices, which contravened Apple’s privacy rules after these were revamped in 2018.

Facebook voluntarily delisted the app following discussions between the two companies and was also removed from the Google Play Store.

Then, in early 2019, Apple took the drastic measure of stripping Facebook of its development license altogether after the firm was found to be marketing its newly-developed Research app, which bore staggering similarities with Onavo Protect, to children.

The attempted acquisition of NSO Group - and effort to seize Pegasus - arose because Facebook was concerned that its method for gathering user data through Onavo Protect was less effective on iOS devices than Android devices.

The connection between NSO Group and Onavo, as well as Facebook’s ambitions to use the Pegasus technology to render iOS tracking far more potent, was hidden until it was revealed in the court documents.

When the acquisition attempt failed, Facebook even approached NSO Group to solicit its services through Pegasus technology to further monitor Onavo Protect users, for a per-user fee to be paid monthly.

This approach was also rejected, as NSO Group only solicits its technology to government agencies, security services and law enforcement agencies.

Employees from NSO Group, incidentally, sued Facebook last November for allegedly blocking their private WhatsApp accounts, as well as the Facebook and Instagram accounts of their friends and family members.

Keumars Afifi-Sabet
Features Editor

Keumars Afifi-Sabet is a writer and editor that specialises in public sector, cyber security, and cloud computing. He first joined ITPro as a staff writer in April 2018 and eventually became its Features Editor. Although a regular contributor to other tech sites in the past, these days you will find Keumars on LiveScience, where he runs its Technology section.