The Graphite Spyware of Paragon Solution has infected about 90 devices all over the world, among the targets there is also Francesco Cancellato, director of Fanpage.it. Through a zero click attack, which does not provide for the victim’s interaction, it has had access to sensitive data, conversations on WhatsApp, photos, messages and geolocation in real time.
It is invisible, silent, infected the devices without anyone noticingMeanwhile, he sees everything. Is called Graphiteis a high -end surveillance software produced by Paragon solutionIsraeli company, and has infected about 90 devices all over the world. Among the targets there is also Francesco Cancellato, director of Fanpage.it. Once the spyware infected the device has Total accesscan also read encrypted chat On platforms such as WhatsApp and Signal. Not only that, the infection takes place without any interaction by the victims. As the experts explained, it was a zero click attack.
For the targets it is impossible to notice the spyware, and in fact the attack was reported by Metawho wrote to the victims for warn them of the attack: “In December – reads the message – WhatsApp interrupted the activities of a spyware company that we believe has attacked your device. Our investigations indicate that you may have received a harmful file via WhatsApp and that the spyware may have involved the‘Access to your dataincluding messages saved in the device “.
What is the Graphite Spyware of Paragon
Graphite is the flagship product of Paragon Solution, it works similarly to Pegasus by NSO Group. The spyware is in fact designed to infect the mobile devices without the need for any interaction from the victim. As he explained John Scott Railton, Senior researcher at the Citizen Lab of the University of Toronto, which monitors and identifies digital threats against civil society, “the infection took place without any interaction. No connection to click or attached to open. This is called Zero-Click attack. “They are sophisticated attacks, often targeted and used during espionage operations.
Illegal espionage against journalists and civil society, the Fanpage.it CDR: clarify immediately
How the paragon spyware works
Graphite infects the devices and allows attackers to access sensitive data including photos, videos, contacts and even private conversations on encrypted messaging apps such as WhatsApp and Signal. The software can also Register audio, screens, access personal files and monitor the GPS position user. Take advantage of the vulnerabilities present on the device, for example a flaw in verifying data, to infect the system with targeted computer attacks.
Graphite entered the devices with a zero click attack: what does it mean
The “zero-click attacks” also called “zero-click exploit” or completely remote do not require any interaction from the victim. Nor open a harmful link, nor download suspicious files or grant authorizations. It is in fact very simple to be infected and not to notice that on the device There is a spyware. The malware can infect the phones, PC, tablet by exploiting the vulnerabilities present in messaging applications, in web browsers or operating systems.
What can spy on mobile phones: it also targeted chat WhatsApp and Signal
Graphite is able to access the data on the victim’s phone, even those stored on encrypted apps. Among the main espionage features there are:
- Access to photos and videos stored in the device
- Monitoring of calls and SMS messages
- Interception of conversations on messaging appsincluding WhatsApp and Signal
- Geolocation in real time
- Activation of the microphone and camera To record audio and video without user consent
What is the Israeli Company Paragon Solution
Paragon Solution is an Israeli company specialized in the development of Advanced cybersecurity solutions. It was founded in 2019 by the former Israeli Prime Minister Ehud Barakin December 2024 it was purchased by an American private equity company, AE Industrial Partnersan investment group based in Florida specialized in national security, aerospace and industrial services, for 900 million dollars.
On his website the company explains that his “tools were developed following ethical principles And to counteract threats difficult to manage. “On the paragon card he would sell his spyware only to the governments of the democratic countries, with the aim of hitting dangerous criminals and terrorists.
According to Natalia Krapiva, Senior Legal Consultant for Technology at Access Now, organization for digital rights investigating the abuse of Spyware, “for some time paragon has had a reputation to be one ‘Best’ spyware company Do not meddle in evident abuse, but the recent Revelations of WhatsApp suggest the opposite. But these types of abuse are a constant in the commercial spyware industry “.
