WhatsApp reveals misuse of spyware targeting journalists and activists, raising questions about government usage.
In late January 2023, WhatsApp announced that 90 users, including journalists and civil society members, were targeted by spyware developed by the Israeli firm Paragon Solutions.
This claim follows a legal victory for WhatsApp against
NSO Group, another Israeli company known for its cyber surveillance tools.
The allegations of misuse of Paragon's hacking tool have sparked debate concerning the applications of such technology by government agencies worldwide.
Among the reported victims are Francesco Cancellato, an Italian journalist; Luca Casarini, founder of an NGO supporting immigrants; and Husam El Gomati, a Libyan activist residing in Sweden.
Their mobile phones were reportedly compromised by Graphite, Paragon's spyware.
The University of Toronto's Citizen Lab, known for its research on digital threats against civil society, is expected to release a detailed technical report regarding the breach.
The issues surrounding the abuse of spyware create a complex landscape, given the potential for surveillance tools to infringe on privacy and freedoms.
Paragon Solutions, which licenses its spyware to various government agencies, maintains that Graphite is intended for use in national security missions, including counterterrorism and counter-narcotics efforts.
In a statement, a Paragon representative affirmed the company's commitment to compliance with laws and regulations, asserting a zero-tolerance policy for violations of its terms of service.
They noted that users are prohibited from targeting journalists and civil society leaders illicitly.
Following the revelations, Paragon acted to terminate its contract with the Italian government, which had previously claimed no involvement in the targeting of the individuals named.
Italy has initiated an internal investigation into the matter.
David Kaye, a former UN special rapporteur on freedom of expression, remarked on the dangerous potential of military-grade surveillance products like those offered by Paragon, citing risks of governmental abuse of power.
The concerns raised in this situation extend beyond Italy, paralleling prior instances of surveillance abuse observed in countries such as India, Mexico, and Hungary.
The implications of such spyware usage are particularly pressing in the United States context.
In 2019, during the administration of
Donald Trump, the FBI was granted a limited license to test
NSO Group's
Pegasus spyware, although the agency stated it was never used in domestic investigations.
Despite warnings about the dangers posed by non-compliant surveillance companies, the U.S. Immigration and Customs Enforcement (ICE) reportedly entered into a $2 million contract with Paragon Solutions under the Biden administration, a deal that was paused subsequent to media scrutiny.
The Biden administration has taken steps to curtail the use of such surveillance tools; it included
NSO Group on a blacklist in 2021 and implemented an executive order in early 2023 discouraging their misuse by federal agencies.
Paragon Solutions' recent acquisition by AE Industrial Partners, a U.S. firm, and its establishment of a subsidiary based in Virginia have led the company to assert its alignment with U.S. laws and regulations.
Experts such as those at Citizen Lab and Amnesty Tech are at the forefront of identifying illegitimate surveillance targeting civil society members.
The implications of these findings continue to unfold, highlighting the critical scrutiny needed in monitoring the use of advanced surveillance technologies by governments worldwide.