Selling and/or using NSO and similar software in the US, with certain exceptions about use by the government, is very arguably a violation of a couple of different US laws, including the CFAA.