Particle.news

Download on the App Store

Citizen Lab Confirms Paragon Spyware Targeted Two European Journalists

Revealing gaps in oversight, the forensic analysis challenges COPASIR’s conclusion that no journalists were compromised

Italian investigative journalist Ciro Pellegrino poses for a picture at the offices of the online newspaper Fanpage.it, in Naples, Italy, June 11, 2025. REUTERS/Matteo Ciambelli
FILE - Giorgia Meloni attends a debate at the Senate in Rome, Oct. 26, 2022. (AP Photo/Andrew Medichini, file)
Italian investigative journalist Ciro Pellegrino shows his phone screen displaying a threat notification from Apple warning of a mercenary spyware attack, in Naples, Italy, June 11, 2025. REUTERS/Matteo Ciambelli
Someone tapping a smartphone. (Image: baranozdemir/Getty Images)

Overview

  • Citizen Lab found traces of Paragon’s Graphite spyware on the iPhones of Italian journalist Ciro Pellegrino and an unnamed prominent European journalist.
  • The findings contradict a COPASIR report that had concluded no journalists were compromised, raising doubts about the panel’s inquiry.
  • Italy’s intelligence agencies AISI and AISE suspended Paragon’s surveillance systems on February 14 following allegations of spyware misuse.
  • In January, WhatsApp notified about 90 users in over two dozen countries, including journalists and migrant rescue workers, that they had been targeted with Paragon spyware.
  • Digital rights groups say the confirmed infections underscore enduring oversight gaps in government contracts with private surveillance firms.