WhatsApp users targeted by Paragon Spyware

News Cybersecurity USA

After the Israeli company NSO Group developed the Pegasus spyware, users of WhatsApp have now become the targets of another spyware, this time created by the Israeli firm Paragon. In the previous instance, multiple entities acquired Pegasus, originally designed for government surveillance, to spy on WhatsApp users. However, in this new case, Paragon, the software company, is facing the accusations.

WhatsApp has uncovered evidence that at least 90 individuals from over 50 countries were targeted by the Graphite malicious software for surveillance purposes. As a result, WhatsApp, a subsidiary of Meta, has sent a “Cease and Desist” letter to Paragon, warning the company of the legal consequences they may face for engaging in unlawful cyber activities.

The letter describes the Graphite Spyware as a tool used for espionage without the victim’s consent, primarily designed to collect sensitive information such as messages, calls, contacts, photos, videos, and in some cases, banking details. This stolen data is then transmitted to remote servers for further use.

Paragon, which claims to develop ethically responsible tools on its website, has also received a similar letter with legal obligations sent to law enforcement agencies and Citizen Lab, an organization dedicated to protecting human rights online.

In 2021-2022, Meta also fought a legal battle with NSO Group for selling its Pegasus spyware to third parties who used it to target over 1,400 WhatsApp users in 2019. This list of victims included Amazon’s CEO Jeff Bezos, whose extramarital affair was exposed through the spyware. After thorough investigation, Meta confirmed the allegations, leading to a halt of NSO’s operations in the United States.

Now, Paragon may face a similar outcome. With the evidence collected by WhatsApp, the surveillance tool maker appears to be guilty of the accusations.

If this issue escalates to the White House and attracts significant attention, Paragon may also lose its contract with U.S. Immigration and Customs Enforcement (ICE), a deal worth $2 million or more.

Ad
Join over 500,000 cybersecurity professionals in our LinkedIn group "Information Security Community"!
Naveen Goud
Naveen Goud is a writer at Cybersecurity Insiders covering topics such as Mergers & Acquisitions, Startups, Cyber Attacks, Cloud Security and Mobile Security

No posts to display