WhatsApp, owned by Meta Platforms, disclosed that approximately 90 journalists and civil society members were targeted by spyware developed by Israeli company Paragon Solutions. The spyware, known as Graphite, was deployed through group chats and malicious PDFs, enabling unauthorized access to users’ devices without their knowledge.
WhatsApp detected and disrupted the hacking attempts, subsequently notifying the affected individuals and issuing a cease-and-desist letter to Paragon. The company also reported the incident to law enforcement and Citizen Lab, a Canadian internet watchdog.
Paragon Solutions, which markets itself as an ethical cyber defense company, was acquired by AE Industrial Partners last year and holds a $2 million contract with U.S. Immigration and Customs Enforcement. Despite claiming to sell its products only to stable democratic governments, this incident raises concerns about the misuse of commercial spyware and its implications for privacy and freedom.
This event underscores the ongoing challenges posed by spyware in compromising the security of communication platforms. WhatsApp has previously taken legal action against other spyware developers, such as NSO Group, to protect user privacy and prevent unauthorized surveillance.
