WhatsApp Says It Blocked Pegasus Spyware Campaign Linked to NSO
2026-06-09T08:51:41Z•574b86b031c423db575b48960133de057afe58563b9b48929d6b9c7a75eafed8
FlutterShellInstagram bugMFA bypassMicrosoft 365NSOPegasusPink Extortion GroupRemusStealeraccount takeoverbotnetcloud data theftsupply-chain compromisecontact info leakcrypto clipperdata leakfake adsfast-fluxlaw firmsloadermacOS backdoorpassword reset abuseransom groupsite cloningspywaresupply chain compromisevishing
What happened
Multiple active cyber campaigns and security incidents reported: WhatsApp blocked NSO’s Pegasus spyware activity and is seeking court action; Operation FlutterBridge uses fake Google ads and shell companies to push FlutterShell, a new macOS backdoor; attackers are cloning popular tooling sites (Ghidra, dnSpy, ILSpy) to distribute RemusStealer, crypto clippers and loaders; Silent Ransom Group hides leak sites behind a fast‑flux botnet while targeting law firms; Meta disclosed an Instagram recovery tool bug that allowed password reset abuse affecting 20,225 accounts and leaked contact info (incl
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hackread
- Record identifier
- 574b86b031c423db575b48960133de057afe58563b9b48929d6b9c7a75eafed8
- Enrichment time
- 2026-06-09T08:51:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.