The Italian government has officially confirmed the use of “Graphite,” a sophisticated spyware developed by the Israeli firm Paragon, to target immigration activists. A report released Thursday by the Parliamentary Committee for the Security of the Republic (COPASIR) validated these surveillance operations, though it cleared Italian intelligence agencies of targeting a prominent journalist, leaving significant questions regarding the spyware’s reach unanswered.
Activists Under Surveillance
The parliamentary inquiry focused on the targeting of Luca Casarini and Giuseppe Caccia, both prominent members of the nonprofit Mediterranea Saving Humans. The organization is dedicated to rescuing migrants in the Mediterranean Sea. COPASIR determined that the surveillance of these individuals was conducted under lawful authorization by Italian intelligence, citing ongoing investigations into the alleged facilitation of illegal immigration.
The scandal erupted in January after WhatsApp issued alerts to approximately 90 users, warning them that their devices may have been compromised by Paragon’s software. This revelation intensified scrutiny on Italy, a nation with a historical reputation as a hub for both the development and controversial deployment of government-grade spyware.
The Journalist’s Unsolved Case
While the committee defended its actions against activists, it struggled to explain why Francesco Cancellato, director of the news outlet Fanpage.it, received a notification warning him of a potential hack. Cancellato’s publication is known for high-profile investigations, including reports on the youth wing of Prime Minister Giorgia Meloni’s far-right party.
COPASIR claimed that a review of intelligence agency databases and audit logs yielded no record of legal authorization to spy on Cancellato. The committee suggested, without providing evidence, that a foreign government using Paragon’s tools might be responsible. Cancellato rejected these findings, stating, “Case closed? Not at all,” and demanded further transparency.
Intelligence Agencies and Paragon
The investigation offered a rare glimpse into the operational mechanics of Graphite. Agencies AISE and AISI confirmed they had utilized the spyware but have since rescinded their contracts with Paragon. The report noted that while Paragon’s contracts explicitly forbid the targeting of journalists and human rights activists, the software allowed for the interception of real-time and stored communications, even within end-to-end encrypted applications.
John Scott-Railton, a senior researcher at The Citizen Lab, emphasized that the lack of a clear explanation for the journalist’s compromise remains a critical security failure. “This outcome can’t make Paragon happy,” Scott-Railton noted, confirming that his team continues to analyze data from the affected devices to determine the true source of the intrusion.
Broader Implications
The report also clarified the status of other figures:
- David Yambio: The president of Refugees in Libya was confirmed as a lawful target of state surveillance, though not via Paragon’s software.
- Mattia Ferrari: The chaplain for Mediterranea Saving Humans was found to have no evidence of being targeted by state-sanctioned spyware.
As the investigation concludes, the mystery surrounding the unauthorized targeting of Italian journalists remains a point of contention, keeping the spotlight firmly on the opaque operations of the private spyware industry.