Cyber Crime
Zero-Click Spyware: Your Phone Can Be Hacked Without You Clicking a Malicious Link.
WhatsApp has alerted users about a dangerous hacking attack that targeted nearly 90 individuals across more than two dozen countries using a “zero-click” exploit. This means the victims’ devices were compromised without requiring them to click on any malicious links.
The hacking tool was reportedly developed by Paragon Solutions, an Israeli company specializing in spyware. Its software is sold to government clients under the pretext of law enforcement and national security. The affected individuals included journalists and civil society members, raising concerns about targeted surveillance.
According to Reuters, WhatsApp detected and disrupted the attack, which involved sending malicious electronic documents to the victims. These documents exploited vulnerabilities in the app, allowing hackers to gain access to users’ devices remotely without any user interaction. Experts warn that such zero-click hacks pose a significant risk as they are extremely difficult to detect or prevent.
Register Now for FutureCrime Summit 2025 – Secure Your Spot Today!
WhatsApp officials have not disclosed the identities of those targeted but confirmed that victims were located in several European nations and other regions. The Guardian also reported that journalists and civil society members were among those affected. In response to the breach, WhatsApp has referred the matter to Citizen Lab, a Canadian internet watchdog group known for investigating spyware threats. While WhatsApp did not reveal how it attributed the attack to Paragon Solutions, officials confirmed that law enforcement agencies and industry partners had been informed.
Cybersecurity experts, including Citizen Lab researcher John Scott-Railton, emphasized that this attack serves as a stark reminder of the growing threat of mercenary spyware. As spyware technology continues to advance, users remain at risk of being hacked without their knowledge or interaction.
