Yazılar

WhatsApp Uncovers Spyware Campaign Targeting Italian Users

WhatsApp has revealed that an Italian surveillance firm tricked around 200 users into downloading a fake version of its app embedded with spyware.

The campaign was attributed to ASIGINT, a subsidiary of SIO, which develops cyber intelligence tools for government and law enforcement clients. According to WhatsApp, the attack relied on deception, persuading victims to install malicious software disguised as the legitimate app.

The company described the operation as “highly targeted,” noting that most affected users were based in Italy. The spyware enabled unauthorized surveillance once installed, raising concerns about privacy and digital security.

Meta Platforms, which owns WhatsApp, has taken action to disrupt the campaign. However, details about the specific targets or the full scope of the surveillance have not been disclosed.

This marks the second major spyware-related incident in Italy within 15 months. A previous case involved software from Paragon, which led to a fallout between the company and Italian authorities.

The latest incident highlights the growing use of sophisticated social engineering tactics in cyber espionage, as well as ongoing concerns over the role of commercial surveillance tools in monitoring individuals.

Italy Ends Spyware Contracts with Israeli Firm Paragon Amid Controversy

Italy and Israeli spyware maker Paragon have terminated their contracts following allegations that the Italian government used Paragon’s technology to hack phones of government critics, according to a parliamentary report released Monday and statements from both parties.

The fallout stems from a report by Italy’s parliamentary security committee (COPASIR) and earlier revelations from Meta’s WhatsApp, which disclosed that Paragon spyware targeted multiple users including an investigative journalist and members of Mediterranea, a migrant rescue charity critical of Prime Minister Giorgia Meloni.

The government acknowledged that seven Italian phone users had been targeted but denied involvement in illicit surveillance and said it had tasked the National Cybersecurity Agency to investigate. COPASIR’s report states that Italian intelligence services initially suspended and later ended their contracts with Paragon after the media backlash, though the exact timing remains unclear.

Contradictory statements have fueled political criticism, with opposition parties demanding clarity. Paragon claims it ceased providing spyware after allegations against journalist Francesco Cancellato became public, but said the government declined joint investigation offers to verify whether Cancellato was spied on. The committee found no evidence Cancellato was surveilled with Paragon’s tools.

COPASIR also detailed that Italy’s domestic and foreign intelligence agencies used the spyware sparingly, with prosecutor approval, for law enforcement purposes including counter-terrorism, fugitive searches, and anti-smuggling. It stated that spying on Mediterranea activists related to their activities potentially connected to irregular immigration, with authorization from the government.

Undersecretary Alfredo Mantovano, responsible for intelligence oversight, authorized the spyware use on Mediterranea activists Luca Casarini and Beppe Caccia in September 2024. Meanwhile, six Mediterranea members, including Casarini and Caccia, face trial accused of aiding illegal immigration, charges they deny.

The scandal has drawn calls for parliamentary inquiry and public scrutiny over surveillance ethics and government transparency.

Italy Investigates Spyware Targeting Seven WhatsApp Users

Italy’s government reported on Wednesday that seven mobile phone users in the country were targeted by spyware on WhatsApp, sparking concerns over privacy violations. Prime Minister Giorgia Meloni’s office called the situation “particularly serious” and has directed the National Cybersecurity Agency (ACN) to investigate. The targeted individuals included a journalist and a prominent migrant rescue activist.

Luca Casarini, co-founder of the Mediterranea Saving Humans charity, shared with Reuters the spyware alert he received from WhatsApp on Friday, the same day Meta Platforms accused the surveillance company Paragon Solutions of targeting roughly 90 users across several countries, including activists and journalists.

The Italian cybersecurity agency was informed about the seven confirmed cases, but Meta has withheld the identities of the individuals to protect their privacy. The spyware also impacted users across various other EU nations, including Belgium, Greece, and Spain, among others.

Meta alleged that Paragon Solutions, reportedly based in the U.S., used a sophisticated “zero-click” hack to infiltrate users’ phones and steal data, a method that requires no interaction from the targeted individuals. A cease-and-desist letter was sent to Paragon, but the company did not immediately respond to requests for comment.

Casarini, a frequent target of criticism from anti-migrant media, said the attempt to hack his phone was a violation of democracy. Similarly, Francesco Cancellato, an Italian journalist and recipient of one of the spyware alerts, expressed concern about the intrusion while conducting his own investigation into the incident.