Rights group says NSO Group's claimed reviews of software sales to prevent misuse 'appear to have been ineffective,' company profits from 'abuses'; firm denies allegations