An investigation accuses Israeli cyber-security firm NSO Group of pretending to be Facebook.