That is absolutely not the implication. NSO is not the Israeli government and the identity of the attackers in this case is not known.

Pegasus is classified as a weapon and Israel is supposed to vet each contract, this has been discussed extensively here. If Russia is not the buyer in this case, then I am curious to hear suggestions about whom they could be instead.