Journalist Exposes Paragon Spyware Attack on WhatsApp: ‘I Feel Violated’

In a shocking revelation, journalist Francesco Cancellato received a critical notification from WhatsApp, alerting him about a potential spyware attack on his device. This incident highlights the growing concerns over digital privacy and security, especially for those in the media. In this article, we delve into the details of the hacking campaign that targeted Cancellato and others, shedding light on the implications for journalists worldwide.

WhatsApp Notification Raises Alarms for Cancellato

On Friday, at 2:48 p.m., while at home near Milan, Cancellato received an alarming message from WhatsApp. The message stated:

“In December, WhatsApp interrupted the activities of a spyware company which we believe attacked your device. Our investigations indicate that you may have received a harmful file via WhatsApp and that the spyware may have resulted in accessing your data, including messages saved on the device.”

The notification continued, informing him that while they had implemented measures to prevent further attacks, his device might still be compromised.

Targeted by a Spyware Campaign

Cancellato is the first individual to publicly come forward after WhatsApp’s disclosure of a hacking campaign linked to Paragon Solutions. This campaign reportedly targeted around 90 individuals globally, including journalists and civil society members across Europe.

Emotional Impact of the Attack

Expressing his feelings to TechCrunch, Cancellato stated, “I feel violated.” Initially, he suspected the message might be a scam. However, the reality of the situation hit him hard:

• “Why me?”
• “What did they take from me?”
• “Who did it?”

He reflected on the sensitive information stored on his device, which included personal and work-related data.

Cancellato’s Role as a Journalist

Cancellato serves as the director of Fanpage.it, an Italian news outlet known for its investigative reporting on corruption and organized crime. The publication’s previous investigations have included undercover work on the youth wing of Italy’s ruling party, revealing troubling behavior among its members.

Concerns Over Digital Security

Following the notification, Cancellato made the decision to go public, emphasizing the importance of transparency in journalism. He refrained from speculating about the attackers but acknowledged numerous unanswered questions regarding the breach.

Paragon Solutions and the Broader Implications

WhatsApp attributed the hacking campaign to Paragon Solutions, an Israeli company known for developing surveillance technology. Reports suggest that Paragon sells products designed to exploit vulnerabilities in encrypted messaging apps like WhatsApp and Signal.

According to Forbes, Paragon Solutions has provided its services to various democratic governments, with Italy being one of its clients.

Global Reaction and Further Investigations

The Guardian reported that other individuals, such as Libyan activist Husam El Gomati, have also been notified about potential targeting, raising concerns over the implications for activists and journalists alike.

Cancellato highlighted the unusual nature of such surveillance in a Western democracy, stating that the attack on his device also constituted an attack on Fanpage.it.

Next Steps for Victims of Spyware

WhatsApp suggested that victims like Cancellato reach out to Citizen Lab, a digital rights organization dedicated to investigating spyware abuses worldwide. Cancellato confirmed that he has contacted the authorities regarding this incident.

As the digital landscape continues to evolve, the need for robust security measures and awareness regarding cybersecurity threats becomes increasingly vital, especially for journalists and activists.