logo

Nation-State 'Paragon' Spyware Infections Target Civil Society

ID: 26b0f24e-0f1b-5533-9740-3223883ff3aa

STIX ID: report--26b0f24e-0f1b-5533-9740-3223883ff3aa

Feed Name: Dark Reading

Threat Score
85/100

Date Published: 2025-03-21

Date Updated: 2026-04-21

Author: Nate Nelson, Contributing Writer

...
...

Citizen Lab and partners uncovered Paragon Solutions' Graphite mobile spyware being deployed via a zero-click WhatsApp PDF exploit that autoloaded and escaped app sandboxes to surveil targets (journalists, aid workers and civilians); researchers mapped infrastructure across multiple countries, identified around 90 targeted individuals, and linked deployments to various customer organizations while WhatsApp applied a server-side fix.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.