WhatsApp Warns of ‘Zero-Click’ Spyware Attack on Journalists and Activists
New Delhi, 6th February 2025: Meta-owned WhatsApp has reported that around 100 journalists and civil society members using its platform were targeted by spyware developed by the Israeli cybersecurity firm Paragon Solutions.
The Guardian reported on Friday that WhatsApp had informed the affected users, stating with “high confidence” that some devices were compromised in the attacks.
‘Zero-Click’ Attack Raises Concerns
Security experts identified the attack as a “zero-click” exploit, meaning the victims’ devices were infected without requiring them to click on any malicious links or files. While the identity of the organization behind the hacking remains unclear, Paragon Solutions, like other spyware companies, sells its technology to government clients. However, WhatsApp has not disclosed which governments or agencies were responsible for this particular attack. Additionally, the platform has not revealed the locations of the targeted individuals.
WhatsApp Takes Legal Action Against Paragon Solutions
Paragon Solutions has previously been under scrutiny for its $2 million contract with the US Immigration and Customs Enforcement (ICE). According to Wired, the deal was put on hold to ensure compliance with the Biden administration’s ban on spyware use. WhatsApp has since sent a legal notice to Paragon Solutions, demanding that it cease the alleged attacks. The company also mentioned that it blocked the spyware in December, although it remains unclear for how long users were at risk.
Paragon has not officially responded to the allegations. However, a source close to the company stated that it only collaborates with democratic governments and does not sell its spyware to nations with a history of abuse, such as Greece, Poland, Hungary, and Mexico.
Paragon’s Spyware ‘Graphite’ Compared to Pegasus
The spyware in question, named Graphite, operates similarly to Pegasus, the notorious hacking tool developed by NSO Group. Once installed, Graphite can access all data on a target’s phone, including encrypted messages from WhatsApp and Signal.
Paragon Solutions was founded by former Israeli Prime Minister Ehud Barak and was recently sold to the US private equity firm AE Industrial Partners for $900 million. However, the sale is still awaiting approval from Israeli regulators.
WhatsApp Suspects Spyware Spread via PDF Files
WhatsApp suspects that Paragon’s spyware may have been spread through malicious PDF files sent in group chats. The company is currently working with researchers from Citizen Lab at the University of Toronto to investigate the attack further.
This incident follows WhatsApp’s ongoing legal battle against NSO Group, in which a US judge recently ruled that NSO was responsible for hacking 1,400 WhatsApp users in 2019, violating both US hacking laws and WhatsApp’s terms of service.
The latest attack raises renewed concerns about the use of spyware against journalists and civil society members, prompting fresh calls for stronger cybersecurity protections and government regulations.
