Nearly 100 journalists and other members of civil society using WhatsApp, the messaging app owned by Meta, were targeted by a spyware program owned by Paragon Solutions, an Israeli software maker, the company announced today.
Journalists and other members of civil society were notified of a possible compromise of their devices, with WhatsApp telling the Guardian that there was a "high possibility" that the users in question had been targeted and "possibly compromised".
The company declined to disclose where the journalists and civil society members were located, whether they were based in the US or other countries.
The company said it had sent a "cease and desist" letter to Paragon and was considering its legal options. WhatsApp said the alleged attacks were halted in December and that it was unclear how long the targets may have been under surveillance.
“WhatsApp has terminated a spyware campaign by Paragon that targeted a number of users, including journalists and members of civil society. We have reached out directly to the people we believe were affected. This is the latest example of why spyware companies must be held accountable for their illegal actions. WhatsApp will continue to protect people’s ability to communicate privately,” a company spokesperson said.
WhatsApp said it believed the so-called vector, or means by which the virus was spread to users, was through a malicious pdf file that was sent to individuals who were added to group chats. WhatsApp said it could say with “confidence” that Paragon was linked to this targeting.