A forensic investigation - that is still ongoing - has confirmed the use of Paragon’s Graphite spyware platform in zero-click attacks that targeted Apple iOS devices of at least two journalists in Europe.
Canada’s Citizen Lab says that the victims were a prominent European journalists who requested anonimity and Ciro Pellegrino, a journalist at Italian publication Fanpage.it.
The researchers identified an indicator linking both cases to the same Paragon operator.
A third alleged spy case follows from a notification by Meta.
Yet to date, there has been no explanation as to who is responsible for spying on these journalists. The attacks occurred in early 2025.
“The lack of accountability available to these spyware targets highlights the extent to which journalists in Europe continue to be subjected to this highly invasive digital threat, and underlines the dangers of spyware proliferation and abuse,” Citizen Lab says.
[…]
AP mentions the Italian government might be behind it, they don’t offer any proof but can’t imagine they’d make such aligation without reason.