Meta’s WhatsApp has accused Israeli spyware company Paragon Solutions of hacking approximately 90 users, including journalists and civil society members, across more than two dozen countries.
Key Details
- Zero-click attack: WhatsApp detected malicious documents that compromised devices without user interaction—a sophisticated hacking method.
- Cease-and-desist: WhatsApp has sent a legal warning to Paragon and disrupted the hacking operation.
- Citizen Lab involved: WhatsApp referred victims to Canadian watchdog Citizen Lab, which investigates cyber threats.
Paragon & the Spyware Industry
- Paragon sells spyware to governments, branding itself as ethical and focused on security threats.
- Industry concerns: Despite claims of selling only to “stable democracies,” spyware from firms like NSO Group and Paragon has been linked to surveillance of journalists, activists, and opposition politicians.
- New ownership: Paragon was recently acquired by Florida-based AE Industrial Partners, raising questions about its future operations.
Global Concerns
- Pattern of abuse: Spyware firms claim to fight crime but are frequently exposed for targeting political and media figures.
- U.S. involvement: At least 50 U.S. officials have been targeted by similar spyware in recent years.
- Access Now’s verdict: The advocacy group warns that the entire spyware industry is plagued by systemic abuse, not just a few “bad apples.”
WhatsApp has notified law enforcement and industry partners, but further action against Paragon remains unclear.