Overview

• Meta-owned WhatsApp disrupted a spyware campaign in December 2024 that targeted approximately 90 users, including journalists and civil society members, using malicious PDFs sent in group chats.
• The spyware, known as Graphite, was developed by Israeli company Paragon Solutions, which markets its tools to government agencies for surveillance purposes.
• WhatsApp has sent cease-and-desist letters to Paragon and is exploring legal action while notifying affected users and providing security guidance with help from Citizen Lab.
• The spyware allowed operators to access encrypted messages, activate microphones, and control infected devices without user interaction, highlighting significant privacy risks.
• Paragon, recently acquired by U.S. private equity firm AE Industrial Partners, has not commented on the allegations, raising concerns about the unchecked proliferation of commercial spyware.