The growing concerns over the unchecked expansion of the commercial spyware industry have deepened with the revelation that WhatsApp users have been targeted by surveillance software developed by Israeli firm Paragon. The platform referred affected individuals to Canadian internet watchdog Citizen Lab for further investigation.
While WhatsApp refrained from naming specific targets, an official from the company confirmed to Reuters that they had “high confidence” that the affected users had been targeted and “possibly compromised.” However, they did not disclose how they linked Paragon to the attacks. Law enforcement agencies and industry partners have been notified, though no additional details have been provided.
Paragon, known for providing high-end surveillance software to government clients, declined to comment on the allegations.
John Scott-Railton, a researcher at Citizen Lab, called the discovery a “reminder that mercenary spyware continues to proliferate.” Such tools, which allow remote access to mobile devices without users’ knowledge, have previously been found on the phones of journalists, activists, and at least 50 U.S. officials.
This development adds to rising concerns over the rapid growth of the commercial spyware market. Israeli-made Pegasus spyware, developed by NSO Group, has been linked to numerous surveillance cases worldwide, targeting journalists, activists, and political figures.
Paragon, co-founded by former Israeli Prime Minister Ehud Barak, was reportedly acquired by U.S. private equity firm AE Industrial Partners for $900 million in 2024. The company’s website claims to offer “ethically based tools” to counter global threats, but digital rights advocates remain skeptical.
Natalia Krapiva, senior tech-legal counsel at Access Now, expressed doubts, stating, “Paragon had the reputation of being a more responsible spyware company, but WhatsApp’s recent revelations suggest otherwise.”
In response, WhatsApp reiterated its commitment to user privacy, stating, “We will continue to protect people’s ability to communicate privately.”
