NSO Group

NSO Group operates as one of the world’s most controversial cybersurveillance companies, developing sophisticated spyware capabilities that enable government clients to monitor targets’ digital communications while generating intense debate about privacy rights and authoritarian abuse of surveillance technology.

Founded around 2010 by former Israeli military intelligence officers Niv Carmi, Omri Lavie, and Shalev Hulio, NSO Group leveraged Israel’s advanced cybersecurity expertise to create commercial surveillance tools primarily marketed to law enforcement and intelligence agencies. The company’s flagship product, Pegasus spyware, represents one of the most advanced mobile device exploitation tools ever developed for commercial sale.

Pegasus operates through “zero-click” attacks that require no user interaction to compromise target devices, allowing remote access to calls, messages, emails, photos, and real-time location data. The software can activate cameras and microphones for covert monitoring while remaining virtually undetectable to users and most security software. NSO markets these capabilities as essential tools for counterterrorism, criminal investigation, and national security operations.

However, investigative reporting by the Pegasus Project—a consortium of international journalists—revealed systematic misuse of NSO technology by authoritarian governments to target journalists, human rights activists, political opponents, and civil society leaders. Documented targets included Mexican journalists investigating government corruption, Rwandan dissidents in exile, and Saudi associates of murdered columnist Jamal Khashoggi.

The revelations prompted international backlash and regulatory action. The U.S. Commerce Department placed NSO Group on its Entity List in November 2021, effectively banning American companies from conducting business with the firm without special licenses. Apple, Meta, and other technology companies filed lawsuits seeking to prevent NSO’s products from targeting their platforms and users.

NSO Group maintains that its products serve legitimate law enforcement purposes and claims to implement due diligence procedures to prevent abuse by clients. The company argues that misuse by government customers should not overshadow the technology’s benefits for combating terrorism and serious crime. However, critics contend that NSO’s business model inherently enables human rights violations by providing sophisticated surveillance capabilities to authoritarian regimes without adequate safeguards against abuse.