In a startling revelation, an official from Meta’s popular messaging platform WhatsApp has accused Israeli spyware company Paragon Solutions of attempting to hack scores of its users, including journalists and members of civil society.
WhatsApp disclosed on Friday that it had sent Paragon a cease-and-desist letter following the cyber intrusion. The company also affirmed its commitment to safeguarding users’ private communications, stating, “We will continue to protect people’s ability to communicate privately.”
Paragon Solutions declined to comment on the allegations.
The WhatsApp official, speaking to Reuters, revealed that around 90 users were targeted in the attack. While he refrained from disclosing specific details about the identities or locations of the affected individuals, he confirmed that they included members of the media and civil society groups.
WhatsApp claims to have successfully disrupted the hacking effort and has since referred the affected users to the Canadian internet watchdog group Citizen Lab. The official did not elaborate on the exact method used to trace the attack back to Paragon but confirmed that law enforcement agencies and industry partners had been informed. However, the United States’ Federal Bureau of Investigation (FBI) has yet to comment on the matter.
Citizen Lab researcher John Scott-Railton emphasized that the discovery of Paragon spyware targeting WhatsApp users highlights the ongoing proliferation of mercenary spyware. “As it spreads, we continue to see familiar patterns of problematic use,” he stated.
Spyware companies like Paragon Solutions market their surveillance tools to government entities, promoting them as essential for crime prevention and national security. However, multiple investigations have revealed the presence of such software on the devices of journalists, activists, opposition politicians, and even at least 50 U.S. officials. This raises concerns about the lack of regulation and potential misuse of such technology.
Paragon, which was reportedly acquired last month by Florida-based investment group AE Industrial Partners, has attempted to brand itself as a responsible player in the spyware industry. The company’s website promotes its “ethically based tools, teams, and insights to disrupt intractable threats.” According to media reports, Paragon allegedly sells its software only to governments in stable democratic nations.
However, Natalia Krapiva, senior tech-legal counsel at the advocacy group Access Now, challenged this claim. “Paragon had the reputation of being a better spyware company, but WhatsApp’s recent revelations suggest otherwise. This is not just a case of a few bad apples—these abuses are a systemic feature of the commercial spyware industry,” she said.
AE Industrial Partners has yet to respond to requests for comment on the allegations.
