US-backed Israeli company's spyware used to target European journalists, Citizen Lab finds
ROME (AP) — Spyware from a U.S.-backed Israeli company was used to target the phones of at least three prominent journalists in Europe, two of whom are editors at an investigative news site in Italy, according to digital researchers at Citizen Lab, citing new forensic evidence of the attacks.
The findings come amid a growing questions about what role the government of Italian Prime Minister Giorgia Meloni may have played in spying on journalists and civil society activists critical of her leadership, and raised new concerns about the potential for abuse of commercial spyware, even in democratic countries.
'Any attempts to illegally access data of citizens, including journalists and political opponents, is unacceptable, if confirmed,' the European Commission said in a statement Wednesday in response to questions from members of parliament. 'The Commission will use all the tools at its disposal to ensure the effective application of EU law.'
Meloni's office declined to comment Thursday, but a prominent member of her Cabinet has said that Italy 'rigorously respected' the law and that the government hadn't illegally spied on journalists.
Mercenary spyware industry
The company behind the hacks, Paragon Solutions, has sought to position itself as a virtuous player in the mercenary spyware industry and won U.S. government contracts, The Associated Press found.
Backed by former Israeli Prime Minister Ehud Barak, Paragon was reportedly acquired by AE Industrial Partners, a private investment firm based in Florida, in a December deal worth at least $500 million, pending regulatory approvals. AE Industrial Partners didn't directly respond to requests for comment on the deal.
Paragon's spyware, Graphite, was used to target around 90 WhatsApp users from more than two dozen countries, primarily in Europe, Meta said in January. Since then, there's been a scramble to figure out who was hacked and who was responsible.
'We've seen first-hand how commercial spyware can be weaponized to target journalists and civil society, and these companies must be held accountable,' a spokesperson for WhatsApp told AP in an email. 'WhatsApp will continue to protect peoples' ability to communicate privately.' Meta said the vulnerability has been patched and they have not detected subsequent attacks. Meta also sent a cease-and-desist letter to Paragon. Last month, a California court awarded Meta $168 million in damages from Israel's NSO Group, whose spyware was used to hack 1,400 WhatsApp accounts, including of journalists, activists and government officials.
Journalists targeted
The Citizen Lab's findings, released today, show that the use of spyware against journalists has continued, despite the backlash against NSO Group, and establish for the first time that Paragon was able to successfully infect Apple devices.
Ciro Pellegrino, who heads the Naples newsroom of an investigative news outlet called Fanpage.it, received a notice on April 29 that his iPhone had been targeted.
Last year, Fanpage secretly infiltrated the youth wing of Meloni's Brothers of Italy party and filmed some of them making fascist and racist remarks. Pellegrino's colleague, Fanpage editor-in-chief Francesco Cancellato, also received a notice from Meta that his Android device had been targeted by Paragon spyware, though forensic evidence that his phone was actually infected with Graphite hasn't yet surfaced, according to Citizen Lab.
The Citizen Lab's report today also revealed a third case, of a 'prominent European journalist,' who asked to remain anonymous, but is connected to the Italian cluster by forensic evidence unearthed by researchers at the laboratory, which is run out of the Munk School at the University of Toronto. The Citizen Lab, which has analyzed all the devices, said the attack came via iMessage, and that Apple has patched the vulnerability. Apple did not respond immediately to requests for comment.
'Paragon is now mired in exactly the kind of abuse scandal that NSO Group is notorious for,' said John Scott-Railton, a senior researcher at the Citizen Lab. 'This shows the industry and its way of doing business is the problem. It's not just a few bad apples.'
Stealthy spyware
Paragon's spyware is especially stealthy because it can compromise a device without any action from the user. Similar to the NSO Group's notorious Pegasus spyware, which has been blacklisted by the U.S. government, Graphite allows the operator to covertly access applications, including encrypted messengers like Signal and WhatsApp.
'There's no link to click, attachment to download, file to open or mistake to make,' Scott-Railton said. 'One moment the phone is yours, and the next minute its data is streaming to an attacker.'
Parliamentary oversight
COPASIR, the parliamentary committee overseeing the Italian secret services, took the rare step last week of making public the results of its investigation into the government's use of Paragon. The COPASIR report said that Italian intelligence services hadn't spied on Cancellato, the editor of Fanpage.
The report did confirm the surveillance, with tools including Graphite, of civil society activists, but said they had been targeted legally and with government authorization — not as activists but over their work related to irregular immigration and national security.
Giovanni Donzelli, vice president of COPASIR and a prominent member of Meloni's Brothers of Italy party, declined further comment Thursday, saying the parliamentary report was 'more relevant than an analysis done by a privately funded Canadian laboratory.'
Citizen Lab says it's 'rigorously independent,' and doesn't accept research funding from governments or companies.
Italy and Paragon both say they've terminated their relationship, but offer starkly different versions of the breakup.
Paragon referred questions to a statement it gave to Israeli newspaper Haaretz, in which the company said that it stopped providing spyware to Italy after the government declined its offer to help investigate Cancellato's case. Italian authorities, however, said they had rejected Paragon's offer over national security concerns and ended the relationship following media outcry.
U.S. contracts
Paragon has been keen to deflect reputational damage that could, in theory, impact its contracts with the U.S. government.
A 2023 executive order, which so far hasn't been overturned by U.S. President Donald Trump, prohibits federal government departments and agencies from acquiring commercial spyware that has been misused by foreign governments, including to limit freedom of expression and political dissent.
The U.S. Department of Homeland Security awarded Paragon a one-year, $2 million contract last September for operations and support of U.S. Immigration and Customs Enforcement, public records show.
The U.S. Drug Enforcement Administration has also reportedly used the spyware. In December 2022, Adam Schiff, the California Democrat who at the time chaired the House Intelligence Committee, wrote to the administrator of the U.S. Drug Enforcement Administration questioning whether the DEA's use of Graphite spyware undermined efforts to deter the 'broad proliferation of powerful surveillance capabilities to autocratic regimes and others who may misuse them.'
___
Byron Tau in Washington, and Lorne Cook in Brussels, contributed to this report.
Erika Kinetz And Paolo Santalucia, The Associated Press
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The Hill
28 minutes ago
- The Hill
Leavitt: ‘High degree of confidence' strikes hit Iran's stored enriched uranium
White House press secretary Karoline Leavitt said Monday the Trump administration has a 'high degree of confidence' that its strikes against Iran hit locations where enriched uranium was being stored amid questions about whether officials in Tehran had relocated the nation's stockpile. 'We are confident, yes, that Iran's nuclear sites were completely and totally obliterated, as the president said in his address to the nation on Saturday night,' Leavitt said on ABC. 'And we have a high degree of confidence that where those strikes took place is where Iran's enriched uranium was stored,' she added. 'The president wouldn't have launched the strikes if we weren't confident in that. So this operation was a resounding success.' The U.S. on Saturday struck three Iranian nuclear facilities: Fordow, Natanz, and Esfahan. President Trump described them in an address to the nation as 'completely and totally obliterated,' something he reiterated in a social media post late Sunday. But experts have acknowledged it would take time to determine the extent of the damage from U.S. strikes, and some reports raising the possibility that Iran moved some of its enriched uranium away from those sites ahead of the attack. 'Final battle damage will take some time, but initial battle damage assessments indicate that all three sites sustained extremely severe damage and destruction,' Chairman of the Joint Chiefs of Staff Gen. Dan Caine said Sunday. The New York Times reported that there was evidence Iran had moved equipment and uranium from the Fordow site in recent days, citing two Israeli officials. The Times also cited text messages from the head of the International Atomic Energy Agency indicating Iran had moved its uranium stockpile. Trump administration officials have maintained that the purpose of the strikes was to decimate Iran's nuclear program and severely curtail Tehran's ability to develop a nuclear weapon. 'We're not at war with Iran. We're at war with Iran's nuclear program,' Vice President Vance said Sunday on NBC News's 'Meet the Press.'
The Hill
an hour ago
- The Hill
Midway through year one, America is souring on Trump's agenda
Last week, President Trump signaled that he would soon make the most consequential foreign policy decision of his presidency, whether or not to order the U.S. military to strike Iran. In no uncertain terms, this decision may ultimately have greater impact than former President Biden's unilateral withdrawal from Afghanistan in summer 2021. Biden's polling numbers never recovered from the chaos that unfolded at that time. Thank you for signing up! Subscribe to more newsletters here With that in mind, it is important and instructive to look at what the polls say about how Americans feel about Trump's presidency thus far, both generally and on key issues such as foreign policy. Roughly six months into his second term, new polling shows that support for Trump has declined across the board and on key issues. Indeed, despite Trump's assertions that his approval ratings hit 'all-time highs,' the numbers tell a different story. Trump began his second term with 51 percent approval versus 44 percent disapproval, but now, those numbers have reversed. Just over half (52 percent) of Americans now disapprove of his job performance, compared to only 40 percent who approve — a net 19-point drop-off, according to the RealClearPolitics polling aggregator. To be sure, as chaos spreads in the Middle East and the question of American involvement hangs in the air, Trump's support on foreign policy is also critical. At the start of Trump's term, Ipsos polling showed Trump with a net plus-2 rating (39 percent to 37 percent), likely due to his promises to end wars and deliver peace through strength. Early on, he seemed to be delivering. He was instrumental in securing a cease-fire between Israel and Hamas and oversaw the return of multiple Israeli hostages. According to polling from Data for Progress (Jan. 17-18), a plurality of Americans — 49 percent — credited Trump rather than Biden with the Israel-Hamas cease-fire. For context, Biden ended his presidency with a minus-18 point approval rating for his handling of the Israel-Palestine conflict, and Trump started his with a plus 12 percent approval rating on the same issue. Half a year later, Trump is practically on par with Biden on the conflict, at minus-17 — a 29-point net swing against him, according to Quinnipiac. Looking specifically at Trump's handling of Iran, 41 percent disapprove, versus 37 percent who approve, according to polling from YouGov. It is not that Americans disagree with Trump's perception of Iran as a threat. In fact, nearly three-quarters (73 percent) say they are worried about the threat Iran poses to U.S. national security, up 13 points from last year, according to polling from Fox News. But Americans' fear of the prospect of another forever war in the Middle East seems to be weighing on the mood. That same Fox poll, conducted last weekend, shows that Trump has lost the public's trust in another key issue area: the economy. Likely due to the chaos and uncertainty unleashed by Trump's tariff policy, a majority (58 percent) of voters disapprove of Trump's handling of the economy, while just 40 percent approve, a significant decline for one of Trump's former strengths. In fact, the 18-point margin of discontent is the worst spread Trump has seen in either of his terms. And it does not appear that Trump's cornerstone legislation, the 'big, beautiful bill,' will help. Six in 10 Americans (59 percent) oppose it, and 49 percent think that the bill will 'hurt' their families economically. Just as the economy went from a strength to a vulnerability, Trump's polling has also seen a reversal on immigration, a crucial issue that largely propelled Trump to victory last November. Americans are increasingly concerned about the administration's heavy-handed approach to immigration. This is not to say that Americans dislike Trump's policies generally; a majority (51 percent) approve of Trump's handling of the border, per NBC polling. And exceptionally strong support (87 percent) remains for deporting migrants who commit crimes, according to Economist-YouGov polling. Yet Americans are turned off by the administration's response to protests in Los Angeles specifically, and the belief that the administration is being too cavalier about whom it is deporting. The same poll shows that 57 percent believe the administration is making mistakes in whom it is deporting, and 74 percent say the government needs to make sure there are no mistakes in deportations. Taken together, polling six months into Trump 2.0 shows that many of his former points of pride and political strengths have lost considerable support among all but his most ardent supporters. But it would be a mistake to say the rest of Trump's presidency is doomed. Tariff uncertainty is likely to fade, either because people stop paying attention or due to signed trade deals. In that same vein, it's entirely possible that views on the economy rebound if the 'big, beautiful bill' delivers on Trump's pro-growth agenda. Moreover, tensions in the Middle East will eventually come to a head, with or without American involvement. Fears of a forever war in Iran are misguided, and it's still not at all certain that Trump will commit American forces. Finally, Trump is greatly assisted by the fact that Democrats are still unable to develop a compelling and politically viable alternative. Still reeling from their loss in November, the party continues to struggle to find its way and challenge Trump's excesses. Six months may just be too short a time period to predict the course of the next three and a half years. But it remains useful and informative to gauge the mood of the electorate at this delicate time. Whether or not Trump can reverse this downward trend remains to be seen. It will be extremely compelling to watch. Douglas E. Schoen and Carly Cooperman are pollsters and partners with the public opinion company Schoen Cooperman Research based in New York. They are co-authors of the book, 'America: Unite or Die.'
Miami Herald
an hour ago
- Miami Herald
Lake Worth Beach celebrity restaurant with movie history shuts down
It's been a really tough road for restaurants in recent years. The trouble started back in 2020, when restaurants were forced to shutter to guests during the pandemic. Don't miss the move: Subscribe to TheStreet's free daily newsletter Although those restrictions were temporary, restaurants then faced a series of challenges. First, there were labor shortages, due partly to the generous unemployment benefits stimulus bills had allowed for. Then, it was supply chain interruptions that made it hard to load up on ingredients. Related: Iconic mall food chain makes massive change The most recent challenge has been ongoing, and it's none other than inflation. Inflation has not only driven up costs for restaurants, but forced many consumers to change the way they spend their money. As a result, a lot of people have cut back on in-person dining, driving a decline in sales. A number of big-name restaurant chains have filed for bankruptcy and closed their doors as consumer demand has waned. Similarly, a number of popular standalone restaurants have been forced to close permanently. Lula's - a popular restaurant in the Palm Beach, Florida, area - has officially closed its doors. Its menu featured Italian favorites that included handmade pastas, seafood dishes, steaks, and meatballs. Before it was Lula's, the location in Lake Worth Beach hosted a number of famous restaurants, including Callaro's Steakhouse, which met its demise during the pandemic, and L'Anjou, which had been open to customers in that space for more than 30 years. The name Lula's was created by combining the names of two main streets in Lake Worth Beach - Lucerne and Lake Avenues. Related: Legendary local restaurant closing saddens fans The location even had a moment in the spotlight when it was featured in the 1981 film Body Heat. At the time, it was the L'Anjou name that appeared on the big screen. Given that the location was in the heart of downtown, it's surprising that Lula's didn't last longer than it did. It opened in October of 2024, lasting less than a year. The brains behind Lula's wasn't just any old chef. Rather, it was celebrity chef Todd English. English has appeared on a number of well-known cooking shows. He's also a James Beard winner and has authored several cookbooks. Related: Popular Mexican restaurant closes after 45 years Lula's wasn't English's only foray into Palm Beach County. He also opened his popular Figs restaurant at The Gardens Mall, but it shuttered in 2016 after seven years. Now, the famous space Lula's occupied has a new name on the lease. It's the owners of famous restaurant Ravish, located a few miles south in Lantana. Operating partner Alexandra Dupuis was stingy with details but said there are plans in the works to open a new restaurant called Pomona where Lula's once served customers. The aim is for Pomona to open this summer. Of course, if a Todd English restaurant struggled to stay afloat, it's questionable whether a replacement will thrive. More Fast Food & Restaurant News: Starbucks makes shocking pricing move customers will loveBankrupt restaurant chain offers new deal, stiff drinkNew Taco Bell menu items combines multiple classics The sad reality is that consumers are shying away not just from casual dining, but high-end dining as well. A lot of people are having a hard time justifying the higher cost given general economic uncertainty. That's bad news for consumers who do have the budget for the occasional high-end meal. Losing a favorite restaurant is always a big blow. And unfortunately, Lula's may only be one of many beloved establishments to shutter this year. Related: After closing 600 locations, fast-food chain has many more planned The Arena Media Brands, LLC THESTREET is a registered trademark of TheStreet, Inc.
