Some individuals have reportedly been subjected to cyber-surveillance through the use of Israeli-developed spyware on WhatsApp.
WhatsApp's recent disclosure unveils potential hacking attempts by Paragon Solutions, an Israeli spyware company. These attacks supposedly targeted civil society workers and journalists on the platform, utilizing a cunning zero-click hack technique. According to WhatsApp, around 90 users fell victim to a malicious PDF file, capable of infecting devices through group chats and granting access beyond just WhatsApp.
WhatsApp, owned by Meta, detected these hacking attempts in December, swiftly shutting down the attack vector. Consequently, the company sent a cease-and-desist letter to Paragon Solutions, highlighting their concerns and commitment to safeguarding private communication.
As per the company's spokesperson, "WhatsApp has thwarted a spyware campaign by Paragon that jeopardized numerous users, including journalists and civil society members. We've reached out to the supposedly affected individuals. This event underscores the necessity for spyware firms to be held accountable for their questionable activities. WhatsApp stands firm in its mission to preserve users' capacity for private communication."
This revelation follows WhatsApp's victory in a lawsuit against another Israeli spyware company, NSO Group, in December 2024. NSO Group had allegedly infiltrated WhatsApp, targeting at least 1,400 human rights activists, diplomats, lawyers, journalists, and other individuals.
Paragon Solutions, headquartered in Tel Aviv, also has an office in Virginia. Intriguingly, an American venture capital firm, AE Industrial Partners, reportedly purchased the Israeli firm for approximately $900 million in December.
However, the acquisition occurred shortly before Paragon entered into a one-year, $2 million contract with Homeland Security Investigations (HSI), a branch of the U.S. Immigration and Customs Enforcement (ICE), for its flagship spyware product, Graphite. This agreement was met with severe criticism from civil society organizations, suggesting a potential infraction of the 2023 executive order issued by former President Biden, which prohibits federal departments from purchasing spyware products posing significant risks.
Presently, it remains unclear who orchestrated the most recent hacking attempts targeted by WhatsApp.
WhatsApp's commitment to protecting user privacy extends beyond preventing attacks, as they also advocate for accountability in the tech industry. The future of tech companies involvement in questionable activities needs to be scrutinized to ensure user safety and privacy are prioritized.
The acquisition of Paragon Solutions by AE Industrial Partners raises concerns about the company's involvement in Homeland Security Investigations' purchase of Graphite, given the executive order prohibiting the use of high-risk spyware products.