Suing across borders is not a problem at all. It is only an issue if you want to sue someone protected by the state. So, well, yes, in this case it world be allowed as much as if NSO tried the same to a US company.