Italy reports Paragon spyware attack on victims in dozens of European countries

6 February 2025 2 minutes Author: Newsman

The Italian government says spyware from Paragon Solutions was used to attack Italians and other Europeans living in dozens of European countries. The campaign, uncovered by WhatsApp, targeted journalists, human rights defenders and political activists. Italy’s cybersecurity agency (ANC) has launched an investigation into the hacking campaign.

The attackers’ main method was to use PDF files to infect victims’ devices without their permission. WhatsApp said it had eliminated the attack vector, while Paragon Solutions, which supplies software to government agencies, declined to comment. The victims include an investigative journalist who wrote about Prime Minister Giorgia Maloni’s right-wing party, a human rights activist and a Libyan activist who was critical of Italian politics. The spyware may have affected smartphones with numbers from Belgium, Greece, Latvia, Lithuania, Austria, Cyprus, the Czech Republic, Denmark, Germany, the Netherlands, Portugal, Spain, Sweden and the United Kingdom.

Paragon Solutions is a commercial spyware vendor that the company says works with the U.S. government and its allies.2024 Similar attacks have occurred before, when governments used spyware to spy on journalists and human rights defenders. WhatsApp and other tech giants have previously warned about special operations by spyware companies that sell cyber espionage tools to governments and private organizations.

The use of commercial spyware to spy on activists and journalists remains a global threat. Italy denies involvement in the attack, but the ANC is continuing its investigation, and WhatsApp has urged users to strengthen their cybersecurity.

Other related articles
News
Read more
Grubhub suffers data breach through third-party provider
GrubHub suffered a data leak through a third-party provider, and contact information of customers, drivers and restaurants, as well as contact information of customers, drivers and restaurants, as well as some payment data, were compromised. The company responded quickly by disabling compromised accounts and strengthening security measures.
99
News
Read more
FBI, Dutch Police Take Down HeartSender Cybercrime Network
The FBI and Dutch cyber police, as part of Operation HeartBlocker, blocked 39 domains associated with cybercrime and shut down the HeartSender network. This network was one of the largest underground markets for phishing tools and access to hacked servers. Cybercriminals stole more than 100,000 accounts, causing losses in the amount of $3 million.
115
Found an error?
If you find an error, take a screenshot and send it to the bot.