Meta Confirms Zero-Click WhatsApp Spyware Attack Targeting 90 Journalists, Activists

Summary: Meta-owned WhatsApp has disrupted a spyware campaign that targeted around 90 journalists and civil society members, utilizing technology from Paragon Solutions. The zero-click attack involved sending a specially-crafted PDF file to users in group chats. WhatsApp has reached out to affected individuals, providing guidance on protecting themselves against potential compromise.

Affected: Journalists and civil society members globally, targeted by spyware from Paragon Solutions

Keypoints :

• WhatsApp successfully neutralized the spyware campaign that began in December 2024.
• The attack employed zero-click exploits via malicious PDF files in group chats.
• WhatsApp sent a cease and desist letter to Paragon Solutions and is exploring further legal options.
• The targets were located across over two dozen countries, with several incidents documented in Europe.
• This incident reflects ongoing concerns about illegal usage of spyware and the need for holding such companies accountable.