Latest news with #COPASIR
The Star
3 days ago
- Politics
- The Star
Alleged Italian phone hacking involves political gossip website, sources say
Italian investigative journalist Ciro Pellegrino shows his phone screen displaying a threat notification from Apple warning of a mercenary spyware attack, in Naples, Italy, June 11, 2025. REUTERS/Matteo Ciambelli/File Photo ROME (Reuters) -Italian prosecutors are looking into the alleged hacking of seven phones, including that of the head of political gossip website Dagospia, sources said, as part of a surveillance scandal involving the technology of spyware company Paragon. The probe follows reports on the alleged spying on two investigative journalists, which have triggered opposition protests and the termination of contracts between Italy and U.S.-owned Paragon. Prime Minister Giorgia Meloni's administration has denied involvement in illicit activities. Prosecutors in Rome and Naples are investigating the crime of unauthorized access into the phones, sources with knowledge of the matter said on Thursday, adding that Dagospia founder Roberto D'Agostino was among seven journalists and activists who were allegedly spied on. D'Agostino, whose website Dagospia produces salacious gossip with political behind-the-scenes stories and is a daily must-read for many Italian reporters, was not immediately available for comment. Dagospia, however, reported on the news involving its founder, republishing reports about the investigations from other media outlets under the headline: "Dagospia ends up being spied upon! The illegal wiretaps scandal gets bigger." As part of their investigation, prosecutors are also looking into the alleged hacking of the phones of investigative reporters, Ciro Pellegrino and Francesco Cancellato, both from the Fanpage website, the sources said. Italy's domestic and foreign intelligence agencies activated contracts with Paragon in 2023 and 2024, respectively, and used it on a limited number of people with permission from a prosecutor, a report by the parliamentary committee on security, COPASIR, said. The foreign intelligence agencies used the spyware to search for fugitives, to counter illegal immigration, alleged terrorism, organised crime, fuel smuggling and for counter-espionage and internal security activities, COPASIR said. The committee said it found no evidence that Italian intelligence services used Paragon spyware on Cancellato. Separately, internet watchdog group Citizen Lab said it found evidence of spying on Pellegrino's phone. Former Prime Minister Matteo Renzi, leader of a small opposition party, called for clarity on Thursday over the hacking case, adding that one does not spy on journalists in democracies. (Reporting by Paolo Chiriatti, Giuseppe Fonte and Alvise ArmelliniEditing by Bernadette Baum)
Yahoo
09-06-2025
- Business
- Yahoo
Italy and Israeli Paragon part ways after spyware affair
By Giuseppe Fonte and Alvise Armellini ROME (Reuters) -Italy and Israeli spyware maker Paragon said they have ended contracts following allegations that the Italian government used the company's technology to hack the phones of critics, according to a parliamentary report on Monday and the company. Both sides said they had severed ties, giving conflicting accounts that triggered widespread criticism from opposition parties in Italy, while the journalists' federation FNSI called on prosecutors to investigate to ascertain the facts. An official with Meta's WhatsApp chat service said in January that the spyware had targeted scores of users, including, in Italy, a journalist and members of the Mediterranea migrant sea rescue charity critical of Prime Minister Giorgia Meloni. The government said in February that seven Italian mobile phone users had been targeted by the spyware. At that time the government denied any involvement in illicit activities and said it had asked the National Cybersecurity Agency to look into the affair. A report from the parliamentary committee on security, COPASIR, said on Monday that Italian intelligence services had initially put on hold and then ended their contract with Paragon following a media outcry. It was unclear when the contract was ended. However, COPASIR recalled that, addressing parliament on February 12, the government had said that it was still in place. The committee also added it found no evidence that Francesco Cancellato, a reported target and editor of investigative website Fanpage, had been put under surveillance using Paragon's spyware, as he had alleged to Reuters and other media outlets. In a statement quoted by Fanpage, Paragon said it stopped providing spyware to Italy when Cancellato's alleged involvement became public, and said the government declined an offer to jointly investigate whether and how he was spied upon. The company did not reply to requests for comment from Reuters. Opposition politicians called on the government to clarify the matter in parliament. Meloni's office declined to comment. The COPASIR report said Italy's domestic and foreign intelligence agencies activated contracts with Paragon in 2023 and 2024 respectively and used it on a very limited number of people, with permission from a prosecutor. The foreign intelligence agency used the spyware to search for fugitives, counter illegal immigration, alleged terrorism, organised crime, fuel smuggling and counter-espionage and internal security activities, COPASIR said. It added that members of the Mediterranea charity were spied on "not as human rights activists, but in reference to their activities potentially related to irregular immigration", with permission from the government. Undersecretary Alfredo Mantovano, Meloni's point man on intelligence matters, authorised the use of Paragon spyware on Mediterranea activists Luca Casarini and Beppe Caccia on September 5, 2024, the report said. Mantovano was not immediately available for comment. A Sicilian judge last month ordered six members of Mediterranea, including Casarini and Caccia, to stand trial on accusations of aiding illegal immigration, the first time crew members of a rescue vessel have faced such prosecution. All have denied wrongdoing.
CNA
09-06-2025
- Politics
- CNA
Italy has ended spyware contract with Paragon, parliamentary document shows
ROME :Italy has terminated a contract with Israeli spyware maker Paragon, a parliamentary document showed on Monday, following allegations that the Italian government used its technology to hack critics' phones. Paragon did not immediately respond to a Reuters request for comment. Meta's WhatsApp chat service said earlier this year Paragon spyware had targeted scores of users, including a journalist and members of the Mediterranea migrant sea rescue charity critical of Prime Minister Giorgia Meloni. The government said in February that seven mobile phone users in Italy had been targeted by the spyware. Rome denied any involvement in illicit activities and said it had asked the National Cybersecurity Agency to look into the affair. A newly published report from the parliamentary committee on security, COPASIR, showed that Italian intelligence services had initially put on hold and then ended their contract with Paragon following the media outcry. The report said Italy's domestic and foreign intelligence agencies had activated contracts with Paragon in 2023 and 2024 respectively and used it on a very limited number of people, with permission from a prosecutor. The foreign intelligence agency used the spyware to search for fugitives, counter illegal immigration, alleged terrorism, organised crime, fuel smuggling and counter-espionage and internal security activities, COPASIR said. It said members of the Mediterranea charity were spied on "not as human rights activists, but in reference to their activities potentially related to irregular immigration", with permission from the government. Undersecretary Alfredo Mantovano, Meloni's point man on intelligence matters, authorised the use of Paragon spyware on Mediterranea activists Luca Casarini and Beppe Caccia on September 5, 2024, the report said. Mantovano was not immediately available for comment. A Sicilian judge last month ordered six members of Mediterranea, including Casarini and Caccia, to stand trial on accusations of aiding illegal immigration, the first time crew members of a rescue vessel have faced such prosecution. All denied wrongdoing. The report found no evidence that Francesco Cancellato, a reported target and editor of investigative website Fanpage, had been put under surveillance using Paragon's spyware, as he had alleged to Reuters and other media outlets.
TechCrunch
06-06-2025
- Politics
- TechCrunch
Italian lawmakers say Italy used spyware to target phones of immigration activists, but not against journalist
An Italian parliamentary committee confirmed that the Italian government used spyware made by the Israeli company Paragon to hack several activists working to save immigrants at sea. The committee, however, said its investigation concluded that a prominent Italian journalist was not among the victims, leaving key questions about the spyware attacks unanswered. The Parliamentary Committee for the Security of the Republic, known as COPASIR, published a report on Thursday that concluded a months-long inquiry into the use of Paragon's spyware, known as Graphite, across Italy. Israeli newspaper Haaretz first wrote about the report. In January, WhatsApp began sending notifications to around 90 of its users, alerting them that they may have been targeted with Paragon's spyware. Several people in Italy came forward after receiving the notifications, prompting a scandal in Italy, which has a long history of hosting spyware companies, and its government's own spyware uses and abuses. Since then, COPASIR has investigated the allegations with the goal of clarifying exactly what happened. COPASIR specifically investigated the targeting of Luca Casarini and Giuseppe Caccia, who both work for Mediterranea Saving Humans, an Italian nonprofit with the mission of rescuing immigrants who try to cross the Mediterranean Sea. In both their cases, the committee concluded that they were lawfully targeted by Italian intelligence agencies as part of investigations related to the alleged facilitation of illegal immigration into the country. But the COPASIR committee concluded there was no evidence that Francesco Cancellato, a journalist who also received a notification from WhatsApp warning him he had been a target of Paragon's spyware, had been targeted by Italy's intelligence agencies. The committee wrote that its representatives were able to query the intelligence agencies' spyware database and audit logs for Cancellato's phone number, and did not find any relevant records. The committee said it also did not find evidence of any legal requests to spy on Cancellato from from the country's top prosecutor's office, nor from the Department of Information for Security, or DIS, a top Italian government department that oversees the activities of the country's two intelligence agencies, the AISE and AISI. The report noted that Paragon has foreign government customers that could potentially target Italians, leaving the door open that this may be how the targeting of Cancellato's phone can be explained. COPASIR did not provide any evidence to support this theory. Contact Us Do you have more information about Paragon, and this spyware campaign? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or Do you have more information about Paragon, and this spyware campaign? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or email . You also can contact TechCrunch via SecureDrop Cancellato is the director of an Italian news website that is known for several investigations including one on the youth-wing of the far-right ruling party in Italy, led by Prime Minister Giorgia Meloni. That investigation revealed that, in private, the members made racist remarks and chanted fascist songs and slogans. The report made no mention of Ciro Pellegrino, a colleague of Cancellato, who received a notification from Apple at the end of April saying he had been targeted with government spyware. It's unclear if Pellegrino was targeted with Paragon's spyware, and the Apple notification did not say. The Italian government, as well as COPASIR, did not respond to a request for comment, specifically asking about Cancellato and Pellegrino. Cancellato responded to the report in an article published on Friday, in which he questioned COPASIR's conclusions on his case, and asked for more and better explanations. 'Case closed? Not at all,' Cancellato wrote. For John Scott-Railton, a senior researcher at The Citizen Lab, a human rights organization that investigates spyware abuses — including the recent cases of abuse in Italy, determining who was targeting Cancellato is the top question left unanswered by the report. 'This report creates a problem for Paragon Solutions because the report leaves the most politically sensitive case unanswered: Who targeted this journalist? This outcome can't make Paragon happy,' Scott-Railton told TechCrunch. 'Because Francesco Cancellato's case remains completely unexplained, all eyes are back on Paragon for an answer.' Scott-Railton also said that Citizen Lab is still investigating Cancellato's case and analyzing his phone and data. Cancellato also confirmed this to TechCrunch. Paragon did not respond to a request for comment. COPASIR also investigated the cases of Mattia Ferrari, the chaplain on the rescue ship of Mediterranea Saving Humans; and David Yambio, the president and co-founder of the non-government organization Refugees in Libya, which is active in Italy. COPASIR said it did not find evidence that Ferrari was targeted, but confirmed there was evidence Yambio had been a lawful target of surveillance, although not with Paragon's spyware. New details uncovered by the investigation As part of its investigation into the Italian government's alleged use of spyware, COPASIR set out to find out as much information about the use of Paragon in the country, requesting information from other government bodies, as well as from Citizen Lab, and WhatsApp's owner Meta. According to the report, the national anti-mafia prosecutor told COPASIR that no prosecutor's office in Italy had acquired nor used Paragon's spyware. (In Italy, every local prosecutor's office has some level of freedom in procuring spyware.) The Carabinieri military police, the national Polizia di Stato, and the financial crimes agency Guardia di Finanza gave the committee the same answer. Paragon told COPASIR that it had contracts with Italy's two intelligence agencies, AISE and AISI. The report said that COPASIR representatives visited the DIS, as well as the two agencies' offices, and examined the spyware's database and audit logs to see how the agencies used Paragon's spyware, including who they targeted. The representatives concluded that there were no abuses related to the surveillance of the people who came forward as spyware targets in the last few months. COPASIR's report also revealed new details on how Paragon's spyware system works behind the scenes. COPASIR said it verified that to use Paragon's spyware, an operator has to log in with a username and password, and each deployment of the spyware leaves detailed logs, which are located on a server controlled by the customer and not accessible by Paragon. But, according to COPASIR, the customer cannot delete data from the audit logs on their servers. The committee also uncovered details about the relationship between Paragon and its Italian intelligence customers, AISE and AISI, which said they have since rescinded their contracts with Paragon. Italy's foreign intelligence agency AISE, which started using Graphite on January 23, 2024 after signing a contract a month earlier, has been using Paragon's spyware with the goal of investigating 'illegal immigration, searching for fugitives, smuggling of fuels, counterintelligence, countering terrorism and organized crime, as well as for the internal security activities of the agency itself.' In doing so, the report said AISE targeted an 'extremely limited' but unspecified number of phone users and accessed both real-time and stored communications sent over end-to-end encrypted apps. COPASIR said that AISI, Italy's domestic intelligence agency, started using Graphite earlier in 2023 and its now-cancelled contract would have expired on November 7, 2025. Like AISE, AISI used Graphite in a small but undisclosed number of cases related to acquiring real-time communications, while the cases are 'a little more numerous' when it comes to exfiltrating chat messages stored on a target's devices. For every spyware deployment, the agencies said it had the appropriate legal approval, according to the report. COPASIR said it had a chance to review Paragon's contracts with its Italian customers and verify that there are clauses that forbid the use of the spyware against journalists and human rights activists. In March, following an investigation, Citizen Lab published a report on Paragon that named the governments of Australia, Canada, Cyprus, Denmark, Israel, and Singapore as likely customers of the spyware maker. Last year, American private equity giant AE Industrial reportedly purchased Paragon for a deal that could reach $900 million.
