WhatsApp said that some users “may have been compromised” by spyware, according to a report by The Guardian. The messaging app, which is owned by Meta, also claims that nearly 100 journalists and activists have been targeted. In addition, the platform claims to have “high confidence” that the Graphite spyware originated from Paragon Solutions, an Israeli-based company that was recently acquired by a US investment firm.
Hacking experts claim that this was a “zero-click” attack, meaning that targeted users did not have to click on the malicious link to get infected. This method is similar to another large-scale WhatsApp hack in which a spyware called Pegasus infected more than 1400 devices. Once a device is infected with something like Pegasus or Graphite, the spyware operator gains full access to it. This even includes the ability to read messages sent through encrypted apps such as WhatsApp and Signal.
WhatsApp says it has informed about 100 users of the potential attack, but declined to disclose where they are located or who they are. The company said it had prevented the alleged attacks back in December, although it is unclear how long the targets may have been at risk.
“This is yet another example of why spyware companies must be held accountable for their illegal actions. WhatsApp will continue to protect people’s right to private communication,” a company spokesperson said. WhatsApp sent Paragon a “cease and desist” letter and said it was exploring legal options.
As for Paragon, it recently entered into a controversial $2 million contract with the U.S. Department of Immigration and Customs Enforcement (ICE). Wired reports that the one-year contract obliges Paragon to provide “a fully customized in-house solution, including license, hardware, warranty, maintenance and training.” The company has not yet responded to the allegations made by WhatsApp.
