WhatsApp, the instant messaging app owned by Meta, has revealed a serious privacy breach in which advanced Israeli spyware was used to target the mobile devices of journalists and members of civil society in several countries. This incident highlights the growing risks of digital surveillance and the ethical implications of these technologies.
According to information shared by the company, around 90 people were victims of this cyberattack , which was perpetrated using Graphite, spyware developed by Paragon Solutions, an Israeli company specializing in cybersecurity tools. WhatsApp stated that it identified and blocked the attack in December 2024, although it is unclear how long the devices were compromised.
An unprecedented attack: the “zero-click” method
The espionage was carried out using a technique known as "zero-click," which requires no user interaction to infect the device. It is suspected that in this case, the malware spread through a PDF file shared in chat groups. This method poses a particularly high risk due to its difficulty of detection.
Graphite software provides full access to the device once installed, including encrypted messages sent through apps like WhatsApp and Signal. This level of intrusion allows spyware operators to monitor conversations and activities with complete impunity.
WhatsApp reactions and ongoing legal actions
WhatsApp sent a cease and desist letter to Paragon Solutions and notified those affected directly about the incident. The company is also exploring legal options to address the misuse of spyware, underscoring the need for greater regulation in this sector.
A WhatsApp spokesperson emphasized the importance of protecting digital communications and stressed that these types of attacks expose the illegal practices of companies that develop surveillance programs. Paragon Solutions has not yet commented on the matter.
A controversial industry and software under scrutiny
Graphite, the spyware in question, shares characteristics with Pegasus, another surveillance program created by the NSO Group that has generated international controversy for its misuse. These tools are often promoted as essential for fighting crime and protecting national security , but they are systematically used to spy on journalists, activists, and political figures.
Paragon Solutions, founded in Israel in 2019, has been the subject of multiple investigations for its possible links to governments that use these technologies in questionable ways . Recently, the company was acquired by the US investment group AE Industrial Partners for $900 million, which has raised even more suspicions about its operations.
Implications and future research
Citizen Lab, a group known for tracking digital threats, collaborated with WhatsApp to identify key details of the attack. The group is expected to publish a report soon that will provide more information on how the intrusion was carried out. Measures that could be taken to prevent similar incidents in the future are also expected to be outlined.
The revelations in this case call into question the integrity of companies like Paragon Solutions. They also underscore the need for a stricter regulatory framework in the spyware industry . The continued proliferation of these tools raises serious concerns about privacy and communications security globally.
The current situation shows that messaging apps can become backdoors for espionage if adequate safeguards are not implemented. This case may be the trigger for a broader debate on the ethics and regulation of these emerging technologies.