Doing so would effectively freeze NSO’s assets and force its largest investors, including Novalpina Capital, a British private equity firm — and its investors, which include Oregon’s state pension fund — to divest. It could also thwart NSO Group’s plans for a lucrative exit, such as an initial public offering or acquisition. NSO was one of four companies that were blacklisted on Wednesday. Candiru, another Israeli firm, was sanctioned based on evidence that it supplied spyware to foreign governments. Positive Technologies of Russia, which was targeted with sanctions last April for its work with Russian intelligence, and Computer Security Initiative...