In a recent cybersecurity disclosure, WhatsApp alleged that nearly 100 users, including journalists and civil society members, were targeted by spyware developed by Paragon Solutions, an Israeli company. However, a news report from The Hindustan Times has stated that Indian users were not among those affected by this breach. WhatsApp emphasized that its Indian user base remained safe from the attack.
Spyware targets Journalists and activists
WhatsApp reported that the sophisticated spyware, known as Graphite, likely compromised the devices of its targets without any action on their part, using a “zero-click” method. This means that victims did not need to click on any malicious link to be infected. While the spyware is believed to be used by government clients, WhatsApp could not identify the specific parties behind the attack.
According to a report from The Guardian, the messaging platform expressed “high confidence” that 90 of its users, mainly journalists and members of civil society, had been specifically targeted by the spyware. WhatsApp reached out to these individuals to alert them of the potential breach of their devices.
US spyware scrutiny and Paragon’s recent contracts
Paragon Solutions has come under increased scrutiny recently, particularly after reports of a $2 million contract the company secured with the US Immigration and Customs Enforcement (ICE). This contract has been reviewed to ensure it complies with a 2023 executive order by the Biden administration, which restricts the use of spyware by federal agencies due to national security concerns.
Paragon Solutions has a US office located in Chantilly, Virginia, and the ongoing scrutiny over its contracts with US government agencies has raised further concerns about the widespread use of spyware by government clients.
WhatsApp takes legal action against Paragon
WhatsApp has responded with a “cease and desist” letter to Paragon Solutions, demanding that the company stop using its spyware for unlawful surveillance.