
The Italian government says spyware from Paragon Solutions was used to attack Italians and other Europeans living in dozens of European countries. The campaign, uncovered by WhatsApp, targeted journalists, human rights defenders and political activists. Italy’s cybersecurity agency (ANC) has launched an investigation into the hacking campaign.
The attackers’ main method was to use PDF files to infect victims’ devices without their permission. WhatsApp said it had eliminated the attack vector, while Paragon Solutions, which supplies software to government agencies, declined to comment. The victims include an investigative journalist who wrote about Prime Minister Giorgia Maloni’s right-wing party, a human rights activist and a Libyan activist who was critical of Italian politics. The spyware may have affected smartphones with numbers from Belgium, Greece, Latvia, Lithuania, Austria, Cyprus, the Czech Republic, Denmark, Germany, the Netherlands, Portugal, Spain, Sweden and the United Kingdom.
Paragon Solutions is a commercial spyware vendor that the company says works with the U.S. government and its allies.2024 Similar attacks have occurred before, when governments used spyware to spy on journalists and human rights defenders. WhatsApp and other tech giants have previously warned about special operations by spyware companies that sell cyber espionage tools to governments and private organizations.
The use of commercial spyware to spy on activists and journalists remains a global threat. Italy denies involvement in the attack, but the ANC is continuing its investigation, and WhatsApp has urged users to strengthen their cybersecurity.