An official from Meta Platforms’ WhatsApp revealed that the Israeli spyware company Paragon Solutions targeted approximately 90 users of the popular messaging service, including journalists and members of civil society. The official stated that WhatsApp has sent Paragon a cease-and-desist letter and is taking steps to protect users’ privacy.
Speaking to Reuters, the WhatsApp official disclosed that the hacking effort targeted individuals in more than two dozen countries, including several in Europe. The attackers used a zero-click exploit, a highly stealthy method that compromises devices without user interaction. Malicious electronic documents were sent to victims, enabling the hack.
WhatsApp has disrupted the hacking campaign and referred affected users to Citizen Lab, a Canadian internet watchdog group. The official did not elaborate on how Paragon was identified as the perpetrator but confirmed that law enforcement and industry partners had been informed.
HUNDREDS of WhatsApp accounts hacked by Israeli spyware firm Paragon Solutions
Perpetrators used 'zero-click attacks', meaning that targeted journos and civil society members did not have to do any actions to have their devices infected
WhatsApp is now pursuing legal action pic.twitter.com/w16UH6zbtT
— RT (@RT_com) January 31, 2025Paragon’s Role in the Spyware Industry
Paragon reportedly sells high-end surveillance software to government clients and markets its tools as essential for fighting crime and protecting national security. However, spyware from companies like Paragon has repeatedly been found on the devices of journalists, activists, opposition politicians, and even 50 U.S. officials, raising concerns about the unchecked spread of such technology.
Despite Paragon’s attempts to position itself as a responsible player in the industry, recent revelations have cast doubt on its practices. The company’s website claims to provide “ethically based tools, teams, and insights to disrupt intractable threats,” media reports suggest it only sells to governments in stable democratic countries. However, Natalia Krapiva, senior tech-legal counsel at Access Now, noted that WhatsApp’s findings indicate otherwise.
An official at Meta’s WhatsApp chat service says Israeli spyware company Paragon Solutions targeted 90 of its users, including journalists and members of civil society https://t.co/8UttKC6KNQ pic.twitter.com/0PfpdE72Vk
— Al Jazeera English (@AJEnglish) January 31, 2025Industry-Wide Concerns
John Scott-Railton, a researcher at Citizen Lab, emphasized that the discovery of Paragon’s spyware targeting WhatsApp users highlights the ongoing proliferation of mercenary spyware and its problematic use. Krapiva added that abuses are not isolated incidents but a systemic issue within the commercial spyware industry.
WhatsApp reaffirmed its commitment to protecting users’ privacy in a statement: “We will continue to protect people’s ability to communicate privately.” The company has not disclosed specific details about the targeted individuals or the methods used to attribute the hack to Paragon.
Paragon declined to comment on the allegations. Similarly, AE Industrial Partners, the Florida-based investment group that reportedly acquired Paragon last month, did not respond to requests for comment.
