A US court held the NSO Group liable for hacking into thousands of devices through a vulnerability on WhatsApp.