An official with Meta Platforms’ (META.O), opens new tab popular WhatsApp chat service said Israeli spyware company Paragon Solutions had targeted scores of its users, including journalists and members of civil society.
The official said on Friday that WhatsApp had sent Paragon a cease-and-desist letter following the hack. In a statement, WhatsApp said the company “will continue to protect people’s ability to communicate privately.”Paragon declined to comment.
The WhatsApp official told Reuters it had detected an effort to hack approximately 90 users.
The official declined to say who, specifically, was targeted. But he said those targeted were based in more than two dozen countries, including several people in Europe. He said WhatsApp users were sent malicious electronic documents that required no user interaction to compromise their targets, a so-called zero-click hack that is considered particularly stealthy.
The official said WhatsApp had since disrupted the hacking effort and was referring targets to Canadian internet watchdog group Citizen Lab. The official declined to discuss how it determined that Paragon was responsible for the hack. He said law enforcement and industry partners had been informed, but declined to give details.
The FBI did not immediately return a message seeking comment.
Citizen Lab researcher John Scott-Railton said the discovery of Paragon spyware targeting WhatsApp users “is a reminder that mercenary spyware continues to proliferate and as it does, so we continue to see familiar patterns of problematic use.”
Spyware merchants such as Paragon sell high-end surveillance software to government clients and typically pitch their services as critical to fighting crime and protecting national security.
But such spy tools have repeatedly been discovered on the phones of journalists, activists, opposition politicians, and at least 50 U.S. officials, raising concerns over the unchecked proliferation of the technology.
