On Friday (31st Jan), WhatsApp, owned by Meta, revealed that it had disrupted a spyware campaign aimed at journalists and civil society members. The operation, which affected nearly 90 people, utilized spyware from Israeli company Paragon Solutions. The attackers were successfully stopped in December 2024.
Zero-Click Exploit Targets WhatsApp Group
Cybercriminals exploited WhatsApp’s encrypted platform with a zero-click (no user interaction was needed for the spyware to be deployed) attack, using manipulated PDFs in group chats to infiltrate devices.
In a statement to The Guardian, WhatsApp confirmed it had notified impacted users, expressing “high confidence” in their targeting and possible compromise. The attackers’ identities and the campaign’s timeline remain unknown, but victims were found in over 24 countries, including several in Europe. WhatsApp has advised affected individuals on enhancing their digital security.
WhatsApp’s Response to Paragon Solutions’ Cyber Threat
In response to the spyware incident, WhatsApp has issued a cease-and-desist letter to Paragon Solutions and is evaluating further legal steps. This marks the first public exposure of Paragon’s spyware in such a case.
While Paragon’s website claims to offer “ethically based tools” for tackling cyber threats, past reports suggest its software has been linked to questionable activities. In 2022, the DEA used Graphite in counternarcotics operations, and in 2023, the CDT pressed the U.S. Department of Homeland Security for information on its $2 million contract with Paragon.
Meta Legal Triumphs in Lawsuit Against NSO Group
WhatsApp’s recent disclosure comes shortly after its landmark win against NSO Group, with a California judge finding NSO responsible for using WhatsApp’s platform to infect 1,400 devices with Pegasus spyware in May 2019.
Paragon Solutions, much like the NSO Group, specializes in developing surveillance software for government clients. Its main spyware, Graphite, is promoted as a solution for combating digital threats. In December 2024, Paragon was acquired by AE Industrial Partners, a U.S. investment firm, in a $500 million acquisition.
