Journalists Targeted by Paragon Spyware in Ongoing Hacking Campaign

Journalists Targeted by Paragon Spyware in Ongoing Hacking Campaign

First seen 26 May 2026, 13:06 UTC techcrunch.com 75% similarity 72.0

Article Content

Browse articles
ThreatCluster

Recent investigations confirmed that two European journalists were hacked using Paragon spyware, specifically targeting Italian journalist Ciro Pellegrino and another unnamed European journalist. The spyware, linked to the Italian government, was previously associated with a broader campaign that affected around 90 users, including journalists and civil society members. The attack vector involved malicious PDFs sent via WhatsApp groups, which did not require any action from the targets. The Citizen Lab's report challenges previous findings by Italy's parliamentary committee, COPASIR, which claimed no evidence of spying on Pellegrino. This incident raises significant questions about the accountability of spyware companies and the implications for press freedom in Europe. The situation remains dynamic as investigations continue into the use of Paragon spyware by government entities.

Key Points: • Two journalists confirmed hacked with Paragon spyware, raising concerns about press freedom. • Attack vector involved malicious PDFs sent via WhatsApp groups, affecting around 90 users. • Citizen Lab's findings contradict earlier reports by Italy's intelligence oversight committee.

ThreatCluster AI

Timeline

2025-01-31
WhatsApp disrupts hacking campaign
WhatsApp reported disrupting a campaign targeting around 90 users, including journalists, linked to Paragon spyware.
techcrunch.com
2025-06-12
Citizen Lab confirms journalist hacks
The Citizen Lab published a report confirming that two journalists were hacked using Paragon spyware, challenging previous findings by COPASIR.
techcrunch.com

Community

Browse all →