Dozens of journalists and civil society members have been targeted in a WhatsApp hacking campaign linked to Israeli spyware firm Paragon Solutions, according to a report published Friday. WhatsApp, owned by Meta, stated that it has “high confidence” that 90 individuals were targeted and “possibly compromised” by the attack.
While it remains unclear who directed the cyberattack, Paragon’s spyware, known as Graphite, is widely used by government clients. WhatsApp has responded by sending a “cease and desist” letter to Paragon and is considering legal action.
A WhatsApp spokesperson confirmed that the company has been reaching out to affected users and reiterated its commitment to holding spyware firms accountable for their “unlawful actions.”
Experts believe the attack likely involved a “zero-click” exploit, meaning victims were infected without having to interact with a malicious link. Instead, the spyware was reportedly delivered through a malicious PDF file sent in group chats. Once a device is infected, the attacker gains full access, including to encrypted messages.
