Paragon Confirms U.S. Government's Use of Their Spyware Solutions

Paragon Confirms U.S. Government’s Use of Their Spyware Solutions

Israeli spyware firm Paragon Solutions has confirmed it supplies its technology to the U.S. government and other allied nations, as reported to TechCrunch. This revelation comes amidst serious allegations regarding the misuse of its spyware against journalists and civil society members.

Paragon Solutions’ Commitment to Ethical Use

In an official statement, Paragon’s executive chairman, John Fleming, emphasized the company’s strict licensing policies. He stated that, “Paragon licenses its technology to a select group of global democracies — principally, the United States and its allies.”

Zero-Tolerance Policy Against Targeting

Fleming further asserted that all users must adhere to terms and conditions that specifically prohibit the unlawful targeting of journalists and civil society figures. He highlighted their zero-tolerance policy, asserting that any violation would lead to the termination of their relationship with offending customers.

Allegations of Misuse: WhatsApp’s Claims

The controversy escalated following WhatsApp’s allegations that Paragon’s spyware was implicated in a hacking campaign aimed at approximately 90 journalists and civil rights activists. Two individuals have already come forward as targets: Italian journalist Francesco Cancellato and Libyan activist Husam El Gomati.

Unanswered Questions Surrounding Allegations

Despite the gravity of these claims, Fleming did not respond to specific inquiries about:

  • The criteria for defining U.S. allies and democracies.
  • The explicit content of its terms of service regarding the targeting prohibition.
  • Whether investigations into alleged abuses are conducted.
  • Any prior contract terminations due to violations.

Previous Contracts and Acquisition Attempts

Last year, Wired reported that Paragon’s U.S. subsidiary secured a $2 million contract with the U.S. Immigration and Customs Enforcement. Additionally, U.S. private equity firm AE Industrial made a bid to acquire Paragon for around $900 million.

READ ALSO  Unveiling Potential Paragon Spyware Customers: Countries Under the Spotlight

WhatsApp’s Legal Action

On Friday, WhatsApp announced it had issued a cease and desist letter to Paragon. Fleming refrained from commenting on this legal development.

Targeted Individuals Speak Out

Cancellato, who leads the news site Fanpage.it, expressed feelings of violation upon discovering that he was a target. His investigations have previously exposed alarming behavior from members of Italy’s ruling party. He stated, “You ask yourself, why me? This is the thing, I mean, what did they want from me?”

El Gomati, residing in Sweden, has been vocal against the Italian-Libyan collaboration aimed at curbing immigration across the Mediterranean. Recently, Ynetnews reported that Italy is a customer of Paragon, although this remains unverified.

Conclusion

As the situation unfolds, the implications of Paragon Solutions’ dealings and the allegations against its technology will likely draw closer scrutiny from the media and human rights advocates.

For further information on this topic, you can reach out to our team at TechCrunch or connect with Lorenzo Franceschi-Bicchierai through secure channels.

Similar Posts

Ex-NSA Official Warns: Federal Worker Cuts Could Devastate Cybersecurity and National Security

Ex-NSA Official Warns: Federal Worker Cuts Could Devastate Cybersecurity and National Security

Bysupport

Former cybersecurity official Rob Joyce testified before the U.S. House Committee on the Chinese Communist Party, expressing grave concerns about proposed cuts to federal probationary employees, crucial for U.S. national security. Joyce, a former NSA cybersecurity director, highlighted the significant role these employees play in combating ongoing cybersecurity threats, particularly from state-sponsored hacking by China. He warned that eliminating these positions could destabilize the cybersecurity workforce, compromise national defense, and stifle innovation. Joyce emphasized that a strong cybersecurity framework relies on a continuous influx of skilled professionals to address emerging threats.

Advanced Health Vendor to Pay £3M Fine After 2022 Ransomware Attack: Implications for NHS Cybersecurity

Advanced Health Vendor to Pay £3M Fine After 2022 Ransomware Attack: Implications for NHS Cybersecurity

Bysupport

A ransomware attack on NHS vendor Advanced has led to a £3 million ($3.8 million) fine from the Information Commissioner’s Office (ICO) due to significant security failures. The company failed to implement multi-factor authentication, allowing hackers to access sensitive data, affecting tens of thousands in the UK and disrupting NHS services. Initially facing a proposed £6 million fine, the amount was reduced after reassessing the breach’s severity. Advanced acknowledged the settlement but provided no further comment. This incident highlights the urgent need for robust security measures in healthcare to safeguard against cyber threats.

Global Law Enforcement Unites to Dismantle Major Cybercrime and Hacking Forums

Global Law Enforcement Unites to Dismantle Major Cybercrime and Hacking Forums

Bysupport

An international coalition led by Europol and Germany’s BKA has dismantled two major hacking forums, Cracked and Nulled, with over 10 million users, in an operation called Operation Talent. The crackdown, conducted from Tuesday to Thursday, resulted in two arrests, the seizure of 17 servers, 50 electronic devices, and €300,000 in cash and cryptocurrency. These forums were key platforms for cybercrime transactions involving stolen data and malware. The operation involved multiple international agencies, including the FBI, and underscores ongoing efforts to combat cybercrime, following previous successful takedowns of similar platforms.

Valve Pulls Suspicious Game Demo Over Malware Concerns: What You Need to Know

Valve Pulls Suspicious Game Demo Over Malware Concerns: What You Need to Know

Bysupport

Valve has removed the free demo of the game Sniper: Phantom’s Resolution from its Steam platform after users reported it was installing malware. The first-person shooter, advertised with engaging features, was found to contain malicious software following user analyses on Reddit. This incident highlights the need for caution when downloading software, even from trusted sources. It follows a previous malware issue with another game, PirateFi, which targeted users’ personal information. While Valve has not officially commented on this removal, the situation underscores the importance of user vigilance, antivirus protection, and promptly reporting suspicious software.

Massive US Government Data Breach: The Largest Cybersecurity Incident Unfolding Now

Massive US Government Data Breach: What You Need to Know Now

Bysupport

Elon Musk’s advisory board, the Department of Government Efficiency (DOGE), has gained alarming access to sensitive U.S. government data, including personal information of millions of federal employees and a $6 trillion payment system. Comprised mainly of young staff from Musk’s companies, DOGE’s questionable cybersecurity practices, such as using personal email accounts for government communications, have raised concerns among lawmakers and cybersecurity experts. The lack of oversight and transparency regarding staff security clearances has led to fears of potential data breaches, national security risks, and legal repercussions. Lawmakers are demanding clarity on DOGE’s operations and authority as the situation unfolds.

Ultimate TechCrunch Cyber Glossary: Your Go-To Guide for All Things Cybersecurity

Ultimate TechCrunch Cyber Glossary: Your Go-To Guide for All Things Cybersecurity

Bysupport

TechCrunch has created a comprehensive glossary to clarify common cybersecurity terminology for professionals and enthusiasts. This resource will be regularly updated to reflect evolving terms in the field. Key terms include Advanced Persistent Threat (APT), which refers to long-term unauthorized access by hackers; backdoor, a method to bypass system security; and botnet, a network of compromised devices used for attacks. Other terms discussed include ransomware, phishing, and vulnerabilities. The glossary aims to enhance understanding of cybersecurity concepts and welcomes feedback for improvement. For further details, readers can explore TechCrunch’s cybersecurity section or reference credible sources like CISA and Kaspersky.