Digital privacy is becoming one of the main battles of the contemporary era. In an increasingly interconnected world, technological advances have opened new possibilities for both freedom and repression. In this context, Paragon spyware has emerged as one of the most sophisticated and dangerous threats to individual privacy, particularly for journalists and members of civil society who dare to challenge power structures.
Recently, a report by Citizen Lab, a digital rights forensics group that has been a pioneer in the investigation of surveillance technologies, uncovered a scandal that severely affects press freedom in Europe. The report revealed that Paragon, an Israeli company known for developing high-level spyware, has been used by state actors and politically motivated groups to hack journalists and activists in Europe, particularly in Italy. This article from ITD Consulting breaks down the nature of Paragon's attack, the impact on fundamental rights, and the implications for privacy and freedom of expression.
The Scandal Expands: Two Journalists Hacked by Paragon
On Thursday, June 12, 2025, Citizen Lab released a detailed report confirming what many feared: at least two European journalists had been hacked using sophisticated spyware called Graphite. This software, created by Paragon, has proven to be extremely effective in infiltrating mobile devices without the direct intervention of the victim, making it an "invisible" or "zero-click" attack. Unlike traditional attacks where the victim has to click on a malicious link or open an infected file, Paragon's zero-click attacks exploit vulnerabilities in apps and operating systems without the user doing anything.
One of the journalists affected by Paragon's spyware was Ciro Pellegrino, an investigative reporter at the Fanpage portal. Pellegrino had been investigating sensitive topics related to Italian politics, particularly the links between the far-right party Fratelli d’Italia and fascist ideology groups. In April 2025, Pellegrino received a security alert from Apple, notifying him about a possible spyware infection attempt, but at that time, neither Paragon nor Graphite were mentioned. Only after a thorough forensic investigation by Citizen Lab was it confirmed that Pellegrino had been the victim of a Graphite spyware attack by Paragon.
This case highlights the inherent vulnerability of personal electronic devices to Paragon, which are used to store a vast amount of private data, including sensitive communications and confidential documents. However, zero-click attacks like Paragon’s are undetectable by conventional security tools, leaving victims defenseless against these threats.
The Forensic Investigation: Crucial Revelations
The forensic investigations conducted by Citizen Lab provided revealing details about how Paragon's attack worked. Paragon's Graphite spyware is capable of infiltrating devices and extracting private information without the user having the slightest suspicion that their security has been compromised. According to the report, infected devices interacted with servers controlled by Paragon, suggesting that the attackers had full access to the personal and professional information of the affected journalists.
What’s most alarming is that Paragon’s spyware can operate in complete stealth, leaving no trace on the devices. This means that affected journalists could have been spied on for months, with access to their emails, text messages, photos, real-time geographic locations, and phone call records. In a world where the protection of sources and confidentiality is essential for journalistic work, Paragon’s espionage represents a direct threat to the integrity of investigations.
Moreover, the confirmation that Paragon’s spyware was used by political or state actors to attack journalists broadens the implications of the case. If Italian authorities or any other government have access to Paragon’s technology, surveillance of journalists could become a systematic practice to monitor political opponents, putting freedom of expression and democracy at risk.
The Political Context: Italy at the Heart of the Controversy
The fact that Paragon’s case affected Italian journalists is no coincidence. Italy, in particular, has been the center of several investigations revealing links between political sectors and extremist ideological groups. Investigative journalists covering these issues have been particularly vulnerable to retaliation, and the use of spyware like Paragon’s Graphite could be a strategy to intimidate and silence dissenting voices.
Ciro Pellegrino, working for Fanpage, had conducted detailed investigations into the connections between Giorgia Meloni’s government and far-right groups. Investigations like these, which expose ties between politics and fascism, are seen as a threat by more conservative sectors of Italian society, making journalists like Pellegrino key targets for Paragon’s attackers.
The link between Paragon and Italian intelligence services has become increasingly clear. Both AISI (Internal Intelligence Agency) and AISE (External Intelligence Agency) have been identified as clients of Paragon, which raises suspicions that the spyware may have been used for internal surveillance purposes. This Paragon case is a concerning phenomenon that calls into question the independence of intelligence institutions and their commitment to protecting human rights and press freedom.
Despite the evidence presented by Citizen Lab, the Italian government has repeatedly denied that Pellegrino was a victim of espionage. Instead, they have opted to discredit the forensic evidence, generating growing distrust both within the country and in the international community. The Italian government’s refusal to acknowledge the reality of the attacks has been interpreted as an attempt to protect political interests and divert attention from abuses of power.
The situation has been strongly criticized by digital rights experts. Professor Anna Moretti from the University of Rome warned that “the use of unregulated spyware by Italian intelligence agencies represents a direct threat to fundamental rights. This kind of surveillance not only violates privacy but also erodes trust in institutions and jeopardizes democracy itself.”
The Expansion of the Scandal: Other Journalists and Activists Affected
Although Pellegrino's case was the first to be confirmed, it is not an isolated incident of Paragon spyware. In May 2025, Italian journalist Monica Macchioni was also hacked using Paragon's Graphite spyware. Macchioni had been covering issues related to immigration and human rights, which had placed her in the crosshairs of political actors with interests in curbing immigration.
Citizen Lab confirmed that, like Pellegrino, Macchioni was targeted by a Paragon zero-click attack that compromised her mobile device. Other journalists, whose identities have not been disclosed for security reasons, have also fallen victim to Paragon spyware, demonstrating that the use of these technologies is not limited to a few isolated cases.
Moreover, human rights activists such as Luca Casarini and Beppe Caccia from the Mediterranea Saving Humans organization have also been confirmed as targets of Paragon. These attacks by Paragon do not only target journalists but anyone who opposes the interests of governments or powerful groups. Paragon's surveillance technology has proven to be an effective tool for intimidating those who fight for sensitive causes like immigrant rights and civil liberties.
The Repercussions for Press Freedom
Spying on journalists has profound implications for press freedom, a fundamental pillar of any democratic society. Press freedom is the foundation upon which government transparency and accountability are built. When journalists are systematically attacked and silenced through espionage, the critical role of the media as agents of social control is undermined.
In this context, self-censorship becomes an inevitable effect. If journalists fear that their communications may be intercepted, they are likely to refrain from investigating or publishing information that could be sensitive or uncomfortable for those in power. Furthermore, information sources may feel intimidated, fearing that their identity could be exposed through infected devices. This not only endangers the integrity of journalistic investigations but also distorts the information that reaches the public.
The official refusal by the Italian government to acknowledge the magnitude of the problem and its lack of transparency have increased the climate of distrust in political institutions. Javier Soler, a human rights advocate, pointed out that "mass surveillance of journalists with spyware jeopardizes fundamental democratic principles and undermines society's right to be informed. Journalists should not be afraid to do their work."
The Global Context of Surveillance and Paragon Spyware Usage
What happened in Europe is not an isolated phenomenon. Around the world, the use of spyware to spy on opponents and journalists has increased significantly. Countries like Mexico, Saudi Arabia, and Hungary have been identified as places where governments have employed these technologies to silence critical journalists. What makes this trend particularly dangerous is the lack of regulation on the companies developing these tools. Companies like Paragon market their products to governments without proper oversight, allowing them to be used for repressive purposes.
The international community, led by organizations like the United Nations, has begun to speak out against this practice. The UN has urged governments to establish strict legal frameworks to regulate the use of spyware and ensure the protection of human rights and freedom of expression. However, the lack of effective action by many nations is perpetuating a vicious cycle of technological abuse and rights violations.
The Need for a Coordinated International Response
Given the growing threat posed by the use of spyware like Paragon, the international community must act decisively. The European Union plays a key role in regulating the use of surveillance technologies. Establishing a clear legal framework that compels governments to be transparent about their use of spyware and guarantees the protection of citizens' digital rights is an urgent necessity.
Tech companies must also take responsibility. Instead of focusing solely on protecting their own interests, they should collaborate with international bodies to strengthen the security of their systems and prevent vulnerabilities that allow attacks like this.
The Paragon scandal underscores the vulnerability of digital rights in an environment where advanced technology is increasingly used to surveil and control populations. What may initially appear to be an isolated incident of spying on specific individuals, such as journalists or activists, actually reflects a broader structural problem. In an increasingly interconnected world, the line between personal privacy and national security has become blurred.
The threat of high-tech espionage, such as that posed by Paragon's Graphite spyware, not only invades the private lives of those affected but also jeopardizes the very functioning of democracies, where the free flow of information is essential. When the right to privacy and freedom of expression is compromised by these surveillance tools, the foundations of press freedom are severely impacted, leading to a less informed, less critical, and more vulnerable society to manipulation.
The protection of digital rights must be a global priority in this context. Governments not only have a responsibility to regulate the use of technologies like Paragon's spyware, but they must also ensure these tools are not used to stifle dissenting voices or restrict freedom of expression. Without strict regulation, the proliferation of these technologies represents a real danger to the fundamental values of democracy.
On the other hand, international organizations must play a key role in creating global regulatory frameworks that protect privacy and human rights in the digital age. The lack of a coherent international agreement on regulating spyware leaves many countries vulnerable to abuses, creating fertile ground for systematic violations of fundamental rights, especially when governments can access these technologies without sufficient oversight or transparency.
Finally, the tech sector and civil society also have a crucial role in this fight. Tech companies must take responsibility for providing secure and transparent tools while collaborating with governmental and non-governmental bodies to mitigate the vulnerabilities of their systems. Consumers, for their part, must demand more protections and greater transparency about how their data is managed and used.
Only through a coordinated effort among all involved parties can we ensure that technology does not become a tool of repression but instead serves to improve people's lives and strengthen democracies. It is essential that we do not allow mass surveillance and the abuse of advanced technologies to become a constant threat but instead work collectively to protect privacy, freedom of expression, and, ultimately, human rights. If you want to learn more about the best cybersecurity measures against spyware like Paragon's, contact us at [email protected]. We have a cybersecurity team to assist you.
EN 
ES