WhatsApp Exposes Spyware Campaign Targeting Journalists and Activists

Meta confirms Israeli firm Paragon Solutions used spyware to target around 90 users across over 20 countries, including civil society members and journalists.

Meta-owned WhatsApp disrupted a spyware campaign in December 2024 that targeted approximately 90 users, including journalists and civil society members, using malicious PDFs sent in group chats.
The spyware, known as Graphite, was developed by Israeli company Paragon Solutions, which markets its tools to government agencies for surveillance purposes.
WhatsApp has sent cease-and-desist letters to Paragon and is exploring legal action while notifying affected users and providing security guidance with help from Citizen Lab.
The spyware allowed operators to access encrypted messages, activate microphones, and control infected devices without user interaction, highlighting significant privacy risks.
Paragon, recently acquired by U.S. private equity firm AE Industrial Partners, has not commented on the allegations, raising concerns about the unchecked proliferation of commercial spyware.