The spyware scandal centered on the Israeli company Paragon Solutions has taken center stage following revelations of its military-grade surveillance software, Graphite, being misused to target journalists and activists across Europe, particularly in Italy. The saga began when WhatsApp disclosed details of its findings, sparking outrage and allegations against the firm.
On Wednesday, Paragon announced the termination of its contract with Italy amid growing scrutiny of its activities. The decision follows allegations of spyware being used against individuals who have been vocal critics of the current government, including journalists and human rights activists. Among those targeted was Francesco Cancellato, the editor-in-chief of the investigative outlet Fanpage.it, and Luca Casarini, founder of the NGO Mediterranea Saving Humans, both of whom have criticized Prime Minister Giorgia Meloni’s policies.
WhatsApp reported earlier this month on a zero-click attack campaign utilizing the Graphite spyware, targeting about 90 individuals across two dozen countries, including seven identified as Italian. This sophisticated spyware can infiltrate devices without user interaction, compromising phones by simply sending malicious PDF files through group chats.
Reacting to the crisis, Cancellato stated, "I was really worried. Being targeted by spyware is a big problem for me. I believe they spied on me just because I'm a journalist." His phone is currently under forensic analysis by Citizen Lab, which specializes in investigating spyware.
The Italian government's response has involved denying any involvement with the surveillance activities. “We exclude allegations of control by the intelligence and, hence, by the Government,” stated Italy’s National Cybersecurity Agency (ACN). The government maintains it reached out to WhatsApp, which reported it had identified victims across various European nations, including Austria, Germany, and Spain.
Paragon Solutions initially suspended its contract with Italy when the first allegations of misuse emerged, but fully terminated it shortly after. A source with knowledge of the situation indicated concerns about Italy violating the ethical framework laid out in its user agreements.
Following the revelations, Meloni’s office has shifted focus, noting the cross-border nature of the targets, emphasizing the importance of international scrutiny as the situation develops. The nature of the breaches not only impacts those targeted but raises questions about broader ethical practices surrounding surveillance technologies.
"Paragon claims its spyware isn’t as invasive as Pegasus, the infamous spyware from Israeli firm NSO Group, but they could still extract any data they wanted from my device," Cancellato expressed, discussing the severe implications of such breaches on journalistic integrity.
Comparative investigations about the use of spyware technologies have intensified, particularly as Paragon faces backlash similar to what NSO Group encountered due to its own historical controversies surrounding its products. Natalia Krapiva from Access Now commented, noting the general shift toward greater awareness and concern about the ethical use of surveillance tools.
The scrutiny does not only lie on Paragon but extends to the Italian government, which many observers believe must take accountability for allowing such breaches to occur. Activists are pushing for clarity on who authorized the use of the spyware, as Casarini prepares to file legal complaints to prompt investigations.
While Paragon has issued statements affirming its commitment to ethical practices—insisting it only sells technology for legitimate purposes and terminating contracts with clients who violate those agreements—the cloud of suspicion remains. The company, following its acquisition by U.S. private equity firm AE Industrial Partners for $900 million, faces intertwined pressures from multiple fronts, including existing U.S. agencies under restrictions from the current administration.
Cancellato concluded, reflecting on the broader concerns affecting transparency and democratic principles, stating, "If there's evidence of misuse, then we need accountability, and the rules must change to account for the realities of surveillance technology. It’s imperative we strike the right balance for our freedoms versus safety measures."
The Paragon spyware scandal raises exponentially complicated questions about the responsibilities of government actors within democracies and the commercial spyware industry as scrutiny on such practices only continues to grow, indicating this issue is far from resolved.