WhatsApp announced on Friday that it recently disrupted a spyware campaign targeting journalists and members of civil society.
The attack impacted around 90 users and was traced back to Paragon Solutions, an Israeli spyware firm.
In a statement to The Guardian, WhatsApp confirmed it had notified the affected users, stating it had “high confidence” that they were targeted and “possibly compromised.” The Meta-owned messaging platform has also issued a cease-and-desist letter to Paragon and is considering legal action.
Paragon Solutions, a company Reuters describes as a rival to the infamous Pegasus spyware maker NSO Group, brands itself as an “ethical” cybersecurity firm. Last year, it was acquired by the US-based investment firm AE Industrial Partners. Additionally, a recent Wired report revealed that the US Immigration and Customs Enforcement (ICE) signed a $2 million contract with Paragon in September 2024.
WhatsApp has a history of taking legal action against spyware companies. In 2019, it sued NSO Group after discovering that the company had used its spyware to target 1,400 users, including journalists, activists, and government officials. The courts later held NSO Group accountable for the attacks.
“This is yet another reminder of why spyware firms must be held responsible for their illegal activities,” WhatsApp spokesperson Zade Alsawah told The Verge. “WhatsApp remains committed to protecting users’ right to private communication.”
