A senior official at Meta Platforms’ WhatsApp has revealed that Israeli spyware company Paragon Solutions targeted scores of WhatsApp users, including journalists and civil society members, in a massive hacking operation spanning 24 countries.
After detecting the hack, the official disclosed that WhatsApp had sent a cease-and-desist letter to Paragon, which affected approximately 90 users worldwide. The targeted individuals, based in over two dozen countries, including several in Europe, received malicious electronic documents that exploited a zero-click vulnerability, allowing hackers to compromise their devices without user interaction.
WhatsApp has disrupted the hacking effort and is working with Canadian internet watchdog group Citizen Lab to support affected users. The company has also notified law enforcement and industry partners, although details of the investigation remain undisclosed.
Citizen Lab researcher John Scott-Railton condemned the attack, stating, “The discovery of Paragon spyware targeting WhatsApp users is a stark reminder of the unchecked proliferation of mercenary spyware and its problematic use.”
The incident raises concerns over the misuse of high-end surveillance software sold by companies like Paragon to government clients. Such spy tools have been repeatedly found on the devices of journalists, activists, opposition politicians, and U.S. officials, highlighting the need for greater regulation and oversight.
