By In early February 2025, WhatsApp alerted users to a sophisticated “zero-click” spyware attack that compromised approximately 90 individuals across more than two dozen countries. This attack, attributed to the Israeli surveillance company Paragon Solutions, notably targeted journalists, activists, and members of civil society. Unlike traditional cyberattacks that require user interaction, zero-click exploits infiltrate devices without any action from the victim. In this instance, the spyware was delivered through malicious PDF files sent via WhatsApp group chats.
Once the file reached the target’s device, the spyware could be installed without the user opening the file, granting attackers access to sensitive information, including encrypted messages, contacts, and call logs. Upon discovering the breach in December 2024, WhatsApp took immediate action to disrupt the attack and began notifying affected users. The company also issued a cease-and-desist letter to Paragon Solutions and is exploring legal avenues to hold the firm accountable.
Paragon Solutions has not provided a public response to these allegations. This incident underscores the evolving nature of cyber threats, highlighting that even without clicking on suspicious links or opening unknown attachments, devices can still be vulnerable. WhatsApp advises users to ensure their applications are updated to the latest versions, as updates often include patches for known vulnerabilities. Additionally, users should remain vigilant and report any unusual activity on their devices to help mitigate potential risks. The broader implications of this attack have prompted discussions about the ethical use of surveillance technologies and the responsibilities of companies in safeguarding user data. Governments and cybersecurity experts are calling for stricter regulations and oversight to prevent the misuse of such powerful tools against vulnerable populations.
