In a developing story from Europe, Citizen Lab, a digital research group, has uncovered that spyware from an Israeli company supported by the U.S. was used to infiltrate the phones of at least three notable journalists in Europe. Among the affected were two editors from an Italian investigative news outlet, raising alarm over the misuse of spyware, particularly in democratic nations. The revelations have sparked inquiries concerning the potential involvement of Italy’s Prime Minister Giorgia Meloni’s administration in monitoring journalists and activists critical of her governance.
The European Union’s executive arm emphasized that unauthorized data access is unacceptable and pledged to enforce existing EU laws vigilantly. However, Prime Minister Meloni’s office has abstained from commenting. Still, a senior Cabinet member insisted that Italy has operated within legal bounds and has not engaged in unlawful surveillance of journalists.
The spyware was developed by Paragon Solutions, a company attempting to carve a niche as a responsible player in the spyware domain and has secured contracts with the U.S. government. Tied to former Israeli Prime Minister Ehud Barak, Paragon was reportedly bought by AE Industrial Partners, a private equity firm, for over $500 million, contingent on regulatory green light.
Meta, a tech conglomerate that owns WhatsApp, revealed earlier this year that Paragon’s spyware, known as Graphite, targeted nearly 90 users across more than 20 countries, largely in Europe. This revelation has triggered an exhaustive effort to discern the identities of those affected and hold accountable the entities responsible. Meta confirmed they have fixed the vulnerability and have not identified further breaches, even issuing a legal notice to Paragon. Furthermore, California’s courts awarded Meta $168 million in damages against NSO Group, another Israeli firm responsible for hacking numerous accounts including those belonging to journalists and officials.
Vittorio di Trapani, head of the Italian journalists’ union FNSI, expressed dismay over the unwarranted surveillance of journalists in Italy, urging EU intervention to protect democratic principles in a founding EU nation. The recent reports by Citizen Lab affirm the ongoing targeting of journalists using spyware, casting a shadow of doubt over companies like Paragon in the wake of scandals similar to those surrounding NSO Group.
Journalists lacking any known associations with those infiltrated by Graphite remain anonymous but are connected through forensic traces found by Citizen Lab. Allegedly, attacks occurred through iMessage, a vulnerability that Apple has reportedly addressed. However, Apple has yet to respond to the unfolding situation.
Paragon stands accused of advancing its spyware business, capable of covertly hijacking devices like the notorious Pegasus software from NSO Group, bypassing user actions to access sensitive applications discreetly. Such potent software raises significant legal and ethical questions regarding its deployment, particularly in societies governed by democratic norms.
In a rare move, COPASIR, the Italian parliamentary committee in charge of overseeing intelligence operations, disclosed last week that Italy’s secret services refrained from spying on journalists associated with Fanpage. However, surveillance of activists was acknowledged, allegedly justified by concerns related to immigration and national security.
Resulting from the controversy, both Italy and Paragon have terminated their association, but each tells a different story of the dissolution. Paragon relinquished spyware provision to Italy following the government’s declined offer to probe the breach, whereas Italian officials attribute the cessation to national security reservations prompted by public backlash.
Paragon is now wary of reputational fallout that could jeopardize its standing with the U.S. The American government maintains caution against purchasing spyware implicated in abuses by foreign governments, potentially impacting its dealings with Paragon. The firm had secured a $2 million contract with the U.S. Department of Homeland Security for a year-long project to facilitate operations with Immigration and Customs Enforcement. Meanwhile, the U.S. Drug Enforcement Administration’s purported use of Graphite spyware has stirred concerns, with legislative scrutiny examining potential implications for global surveillance norms and political freedom.