WASHINGTON – A Meta Platforms official revealed that Israeli spyware company Paragon Solutions had targeted numerous WhatsApp users, including journalists and civil society members.
In response to the hack, WhatsApp sent Paragon a cease-and-desist letter, reaffirming its commitment to safeguarding users’ private communications.
Paragon declined to comment on the matter.
The WhatsApp official told Reuters that an attempt to hack around 90 users was detected. While the specific individuals were not named, it was noted that those targeted were located in over two dozen countries, including several in Europe. The attackers used a “zero-click” hack, sending malicious documents that compromised users without requiring any interaction.
WhatsApp has since disrupted the hacking effort and referred the affected users to the Canadian internet watchdog, Citizen Lab. Although the official did not specify how Paragon was linked to the attack, law enforcement and industry partners have been notified, though further details were not shared.
The FBI has not yet commented on the situation.
Citizen Lab researcher John Scott-Railton emphasized that the discovery of Paragon spyware on WhatsApp serves as a reminder of the growing prevalence of mercenary spyware, noting that such tools continue to be misused.
Spyware companies like Paragon typically market their products as essential for crime-fighting and national security. However, these surveillance tools have frequently been found on the devices of journalists, activists, opposition politicians, and U.S. officials, raising concerns about the unchecked spread of this technology.
Paragon, which was reportedly acquired by AE Industrial Partners last month, has positioned itself as a more ethical player in the industry. Its website promotes “ethically based tools, teams, and insights to disrupt intractable threats.” However, reports suggest that Paragon has only sold its products to governments in stable, democratic countries.
Natalia Krapiva, senior tech-legal counsel at Access Now, said that while Paragon had previously been viewed as a more responsible spyware company, WhatsApp’s recent revelations cast doubt on that reputation.
“This is not just a question of a few bad apples – these types of abuses are endemic to the commercial spyware industry,” she stated.
