WhatsApp confirmed on Friday that it successfully neutralized a sophisticated hacking campaign targeting approximately 90 high-profile individuals, including journalists and civil society members. The operation, which occurred in December, leveraged malicious PDF files delivered through WhatsApp groups to compromise devices without requiring any interaction from the victims.
The Paragon Connection
The platform identified the source of the campaign as Paragon, an Israeli spyware developer acquired last year by the American private equity firm AE Industrial Partners. WhatsApp spokesperson Zade Alsawah stated that the company has already notified affected users and issued a technical fix to eliminate the specific attack vector used by the firm.
“This is the latest example of why spyware companies must be held accountable for their unlawful actions,” Alsawah noted, confirming that WhatsApp has officially issued a cease-and-desist letter to Paragon regarding the unauthorized activity.
Independent Verification
John Scott-Railton, a senior researcher at The Citizen Lab, confirmed that his team has been tracking this specific Paragon-linked campaign. The investigation into the full scope of the attack remains ongoing. While the targets are spread across more than two dozen countries, including several nations within Europe, specific identities remain protected for security reasons.
A Shift in Reputation
This incident marks the first time Paragon has been publicly implicated in the targeting of journalists and civil society. Since its inception in 2019, the firm had maintained a low profile, distancing itself from the controversy surrounding industry peers like NSO Group and Intellexa, both of which have faced severe U.S. government sanctions and blacklisting.
Despite its stated mission of providing “ethically based tools,” the revelation has drawn sharp criticism from digital rights advocates. Natalia Krapiva, senior tech-legal counsel at Access Now, warned that this incident reinforces systemic concerns: “For some time, Paragon has had the reputation of a ‘better’ spyware company, but WhatsApp’s recent revelations suggest otherwise. These types of abuses are a feature of the commercial spyware industry.”
Government Ties and Accountability
The exposure comes after reports surfaced last year regarding Paragon’s business dealings with the U.S. government. Records show the company signed a contract with U.S. Immigration and Customs Enforcement (ICE). At the time, sources indicated the company had passed vetting processes intended to ensure its technology would not be used to target U.S. residents.
Neither Paragon CEO Idan Nurick nor representatives from AE Industrial Partners responded to requests for comment regarding the latest allegations.