Paragon Graphite Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
November 10, 2025
Last Seen
April 2, 2026

Paragon Graphite is a malware family tracked across 5 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed November 10, 2025; most recent activity April 2, 2026.

Overview

Paragon Graphite is a spyware surveillance campaign/family used to monitor targets in a targeted fashion. Recent reporting identifies an Italian adviser as the latest known target, indicating the operation is expanding to additional victims and widening its reach. The coverage underscores the growing prevalence and potential impact of targeted surveillance tools in cybersecurity threat landscapes.

Related Threat Clusters

  • ICE Deploys Paragon Spyware for Fentanyl Surveillance Amid Privacy Concerns

    U.S. Immigration and Customs Enforcement (ICE) has confirmed the use of Paragon Solutions' spyware, Graphite, to combat fentanyl trafficking. The agency's budget has increased significantly, allowing for the purchase of…

    13 articles · Updated April 2, 2026
  • Italian Political Adviser Targeted by Paragon Graphite Spyware

    Francesco Nicodemo, an Italian political adviser, has been targeted with Paragon's Graphite spyware, marking the fifth known case of such surveillance against Italian citizens. Graphite is described as invasive and…

    2 articles · Updated November 10, 2025
  • Francesco Nicodemo Targeted by Paragon Spyware in Italy

    Francesco Nicodemo, a political communications strategist in Italy, has been identified as a target of the Paragon spyware surveillance campaign. He revealed that he had been under surveillance for 10 months before…

    2 articles · Updated November 10, 2025
  • Italian Adviser Targeted in Paragon Graphite Spyware Case

    An Italian adviser has been identified as the latest target in the ongoing Paragon Graphite spyware surveillance investigation. This case highlights the expanding use of advanced spyware technologies in cyber espionage…

    3 articles · Updated November 10, 2025
  • Francesco Nicodemo Targeted by Paragon Spyware in Italy

    Francesco Nicodemo, a political communications strategist in Italy, has been identified as a target of the Paragon spyware surveillance campaign. He disclosed that he had been under surveillance for 10 months before…

    2 articles · Updated November 10, 2025

Recent Intelligence Reports

  • House Dems decry confirmed ICE usage of Paragon spyware — Cyberscoop · April 2, 2026
  • Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance Case — Cybersecuritynews · November 10, 2025
  • Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance Case — Gbhackers · November 10, 2025

CVSS v3.1 Breakdown