Israel's NSO Group is accused of exploiting a bug in the messaging app to install spy software allowing unauthorised surveillance