# NSO Group **Entity class:** Organization or company **Domain:** Commercial Intrusion ## Definition Commercial intrusion-technology company associated with Pegasus. The article follows litigation, injunctions, ownership changes, and the continued market for state-grade technical capabilities. ## Operational role Commercial intrusion supplies a technical information capability distinct from purchased records and open-source research. Products, customers, contracts, ownership, court decisions, and sanctions form the operating environment of this market. The article connects the tier with commissioned cyber service through the professional instruments governing authorized use. **Architecture connections:** [[wiki/Commercial Spyware|Commercial Spyware]] · [[wiki/Cyber Threat Intelligence|Cyber Threat Intelligence]] · [[wiki/SIGINT|SIGINT]]. ## Relationships - **intrusion product:** [[wiki/Pegasus Spyware|Pegasus Spyware]]. - **court context:** [[wiki/Spyware Litigation|Spyware Litigation]]. - **article’s acquisition account:** [[wiki/Robert Simonds|Robert Simonds]]. - **collection route:** [[collections/The Civilian Intelligence Marketplace|The Civilian Intelligence Marketplace]]. - **counterterrorism architecture:** [[collections/Terrorism, Counterterrorism, and the Intelligence Environment|Terrorism, Counterterrorism, and the Intelligence Environment]]. - **source article:** [[articles/The Coming Market for Civilian Spycraft|The Coming Market for Civilian Spycraft]]. ## Sources / Provenance - [[articles/The Coming Market for Civilian Spycraft#X. Mercenary Spyware and the Intrusion Tier|The Coming Market for Civilian Spycraft — X. Mercenary Spyware and the Intrusion Tier]] — October 2026 revision; immediate source for this entry’s place in the marketplace. - [SecurityWeek, NSO Ordered to Stop Hacking WhatsApp, but Damages Cut to $4 Million (October 2025).](https://www.securityweek.com/nso-ordered-to-stop-hacking-whatsapp-but-damages-cut-to-4-million/) - [Reuters via Yahoo News, Trump Administration Removes Three Spyware-Linked Executives from Sanctions List (December 30, 2025).](https://www.yahoo.com/news/articles/trump-administration-removes-three-spyware-233510700.html) - [Office of Senator Michael Bennet, Bennet, Warren, Colleagues Press Treasury and State to Explain Lifting of Sanctions on Three Enablers of Commercial Spyware (February 18, 2026).](https://www.bennet.senate.gov/2026/02/18/bennet-warren-colleagues-press-treasury-and-state-to-explain-lifting-of-sanctions-on-three-enablers-of-commercial-spyware-used-against-americans-journalists-and-dissidents/) ## Connected marketplace roles The source article connects this entry with [[wiki/Pegasus Spyware|Pegasus Spyware]], [[wiki/WhatsApp Exploitation|WhatsApp Exploitation]], [[wiki/Spyware Litigation|Spyware Litigation]], [[wiki/Robert Simonds|Robert Simonds]], [[wiki/Ownership Migration as Regulatory Adaptation|Ownership Migration as Regulatory Adaptation]]. These routes locate the associated people, implementations, methods, and operational contexts in [[articles/The Coming Market for Civilian Spycraft|The Coming Market for Civilian Spycraft]]. **Collections:** [[collections/The Civilian Intelligence Marketplace|The Civilian Intelligence Marketplace]] · [[collections/Terrorism, Counterterrorism, and the Intelligence Environment|Terrorism, Counterterrorism, and the Intelligence Environment]].