Recently, the popular chat service WhatsApp revealed a disturbing and alarming development: the Israeli spyware company Paragon Solutions was behind a targeted effort to compromise the privacy of its users.
WhatsApp claimed that Paragon’s activities spanned across two dozen countries and involved the hacking of approximately 90 users, including journalists, activists, and members of civil society.
The revelation is a significant wake-up call about the growing threat posed by spyware, which continues to evolve in sophistication and reach. With millions of people around the world relying on encrypted messaging services to communicate securely, the targeting of such individuals by commercial spyware companies has sparked widespread concerns.
Paragon Spyware: A Growing Threat
Paragon Solutions, the Israeli spyware company at the center of this controversy, has long been involved in providing high-end surveillance tools to government clients. While the company presents itself as one of the more responsible players in the industry, the recent revelations about its targeting of WhatsApp users paint a starkly different picture. Paragon’s spyware, which is designed to infiltrate mobile phones and gain access to sensitive information without the user’s knowledge or consent, represents a significant challenge to digital privacy.
The spyware used in this case is a sophisticated type of attack known as a “zero-click hack.” In these types of attacks, malicious files are sent to the target’s phone, which, upon receiving the file, automatically executes the hack without any user interaction. This type of attack is particularly dangerous because it leaves no visible trace, making it nearly impossible for the user to detect. A zero-click hack is one of the stealthiest forms of cyber espionage, and its successful execution can provide hackers with complete access to an individual’s private messages, photos, location data, and even microphones or cameras.
This method of cyber intrusion is especially troubling because it does not require any action on the part of the target. Unlike traditional phishing attempts, where an individual might unknowingly click on a malicious link or attachment, zero-click hacks can penetrate a device’s security with no user input. For WhatsApp users, this meant that even the most cautious or security-conscious individuals could fall victim to the attack, making it an alarming reminder of just how vulnerable digital communication platforms can be.
Check also: Don’t Get Scammed: How to Spot the New WhatsApp Family Emergency Scam
The Targeted Users
While WhatsApp did not disclose the specific identities of the 90 users targeted by Paragon’s spyware, it did confirm that these individuals were located in more than two dozen countries. This widespread targeting suggests a strategic, well-coordinated effort by Paragon to compromise the communications of people from diverse backgrounds and roles in society. Importantly, the targeted users included journalists, members of civil society, and activists—groups that are often at risk of being surveilled or harassed by governments seeking to control dissenting voices.
Journalists are particularly vulnerable to digital surveillance, as they often gather sensitive information and communicate with sources who might be at risk if their identities are exposed. The use of spyware to hack into the phones of reporters can be a powerful tool for silencing or intimidating the press. In countries with repressive governments, such attacks are part of a broader effort to suppress free speech, prevent investigative journalism, and control the flow of information.
Take a look to: Scammers Targeting Victims Through Messaging Apps: A Growing Digital Threat in 2024
Similarly, activists and civil society members are frequently targeted by surveillance companies for their roles in challenging power structures or advocating for social change. In many regions, these individuals risk facing retaliation, harassment, or even imprisonment for their activism.
The use of spyware against them represents a significant threat to both their safety and the integrity of their work.
