Paragon Solutions

Last updated
Paragon Solutions Ltd
Industry Spyware
Founded2019
Headquarters,
Israel
Key people
Idan Nurick (CEO)
Ehud Barak (co-founder & board member)
ProductsGraphite
Subsidiaries Paragon Solutions US Inc.
Website paragonsolutions.io

Paragon Solutions is an Israeli spyware company. [1] Paragon has tried to market itself as more responsible than other spyware vendors as competitors like NSO Group and Intellexa have been involved in scandals. [2]

Contents

History

Paragon was founded in 2019 by former commander of Unit 8200 Ehud Schneorson as well as Idan Nurick, Igor Bogudlov, Liad Avraham, and Ehud Barak. [3]

In July 2021, Forbes reported that Battery Ventures had invested between $5 and $10 million in Paragon. [3]

According to the Financial Times, after the discovery of Pegasus on the phones of associates of Jamal Khashoggi, "Paragon declined Israeli government requests to replace Pegasus with Graphite in the Saudi armoury." [4]

In 2023, US president Joe Biden signed Executive Order 14093 which was "seen by experts as targeting NSO, while carving out a space for companies like Paragon to continue selling similar spyware, but only to the closest of US allies." [4] However, the Biden administration subsequently banned the governmental purchase of Paragon software, because of its use for illegal purposes. [5]

In 2024, RED Lattice, a US cybersecurity firm owned by AE Industrial Partners, reportedly acquired Paragon for over half a billion dollars. [6] [7]

In 2025, WhatsApp claimed to have disrupted a campaign by Paragon targeting around ninety users, including journalists and members of civil society. [8] [9] [10]

Graphite

According to Citizen Lab, Graphite is a spyware tool sold by Paragon which allows "access to the instant messaging applications on a device, rather than taking complete control of everything on a phone." [1]

Customers

Italy

Targets of the Italian government have reportedly included Francesco Cancellato, the editor in chief of Fanpage.it, Luca Casarini, the founder of Mediterranea Saving Humans, Husam El Gomati, who has been a vocal critic of Italy and its dealings in Libya, and Father Mattia Ferrari, an Italian priest who had a close relationship with Pope Francis. [11] [12] [13] [14]

In February 2025, Paragon reportedly cut ties with the Italian government after determining that the Italian government had broken "the terms of service and ethical framework it had agreed under its Paragon contract." [15] [16]

In June 2025, an Italian parliamentary committee confirmed that the Italian government had used Graphite to hack the smartphones of activists advocating for immigrant rights, including Luca Casarini, Giuseppe Caccia, and David Yambio, while denying that Italy had hacked the smartphone of Francesco Cancellato. [17] Later the same month, Citizen Lab revealed that Ciro Pellegrino, a colleague of Cancellato and the head of the Naples bureau of Fanpage.it, had also been targeted using Graphite, though it was unclear who was behind the targeting. [18]

United States

Paragon sells to the United States government. [19] The New York Times reported that the Biden administration allowed the Drug Enforcement Administration to use Graphite. [20] Paragon reportedly hired WestExec Advisors in 2019, as well as Holland & Knight in 2023, to advise it on remaining in the US government's good graces. [4] [21]

In March of 2023, President Joe Biden issued Executive Order 14093, banning "operational use by the United States Government of commercial spyware that poses risks to national security or has been misused by foreign actors to enable human rights abuses around the world." [22] [23] [24]

In 2024, a $2 million contract with US Immigration and Customs Enforcement (ICE) [25] was reportedly paused and placed under compliance review, "to review and verify compliance with Executive Order 14093." According to Wired , experts said that "the level of seriousness with which the US government approaches the compliance review of the Paragon contract will influence international trust in the executive order." [26]

Following the January 2021 inauguration of President Donald Trump, the second Trump administration reversed or circumvented the Biden-era ban, and began acquiring phone-hacking spyware (notably Paragon Solutions' Graphite. [27] [28] ). In 2025, Trump lifted the pause, allowing ICE to use Paragon's spyware tools. [29]

Late September, 2025, Trump labeled "Antifa" a "domestic terrorist organization," and issued an executive order to all federal agencies to investigate it. ICE acting director, Todd Lyons, said in an interview that ICE will investigate anti-ICE protester networks, "to track the money. We are going to track these ringleaders... and... professional agitators." In October 2025, reporter Rachel Maddow warned that ICE's new surveillance resources -- including their spyware, which can be covertly inserted into anyone's phone from a drone hovering over a protest -- can be used to target and spy on anyone without a warrant, including any political opposition. Former government officials, Democratic politicians, and civil rights advocates, have complained that ICE is now being permitted and empowered to engage in sweeping surveillance and tracking of Americans engaging in Constitutionally permissible political action. [30] [31] [27] [28] [25]

Other customers

Citizen Lab "identified a subset of suspected Paragon deployments, including in Australia, Canada, Cyprus, Denmark, Israel, and Singapore" and "surfaced potential links between Paragon Solutions and the Canadian Ontario Provincial Police." [1]

See also

References

  1. 1 2 3 Marczak, Bill; Scott-Railton, John; Robertson, Kate; Perry, Astrid; Brown, Rebekah; Razzak, Bahr Abdul; Anstis, Siena; Deibert, Ron (2025-03-19). Virtue or Vice? A First Look at Paragon's Proliferating Spyware Operations (Report). Citizen Lab, University of Toronto.
  2. Franceschi-Bicchierai, Lorenzo (2025-03-19). "Researchers name six countries as likely customers of Paragon's spyware". TechCrunch .
  3. 1 2 Brewster, Thomas (Jul 29, 2021). "Meet Paragon: An American-Funded, Super-Secretive Israeli Surveillance Startup That 'Hacks WhatsApp And Signal'". Forbes.com . Archived from the original on 22 March 2025.
  4. 1 2 3 Srivastava, Mehul; Wiggins, Kaye (2023-05-31). "Cyberweapon manufacturers plot to stay on the right side of US". Financial Times . Archived from the original on 17 Sep 2023.
  5. Menn, Joseph (2 September 2025). "ICE reactivates contract with previously banned spyware vendor" . The Washington Post.
  6. Benjakob, Omer (Dec 16, 2024). "Israeli Spyware Firm Paragon Sold to U.S., as Trump's Digital Arsenal Grows". Haaretz . Archived from the original on 16 Dec 2024.
  7. Franceschi-Bicchierai, Lorenzo (2024-12-16). "Israeli spyware maker Paragon bought by US private equity giant". TechCrunch .
  8. Bruna, Horvath; Collier, Kevin (31 Jan 2025). "WhatsApp says a spyware company targeted journalists and civilians in a global campaign". NBC News .
  9. Franceschi-Bicchierai, Lorenzo (2025-01-31). "WhatsApp says it disrupted a hacking campaign targeting journalists with Paragon spyware". TechCrunch .
  10. Satter, Raphael (January 31, 2025). "Meta's WhatsApp says spyware company Paragon targeted users in two dozen countries". Reuters .
  11. Kirchgaessner, Stephanie (2025-01-31). "Italian investigative journalist targeted on WhatsApp by Israeli spyware". The Guardian . ISSN   0261-3077.
  12. Kirchgaessner, Stephanie; Giuffrida, Angela (2025-02-05). "Italian founder of migrant rescue group 'targeted with spyware'". The Guardian . ISSN   0261-3077.
  13. Kirchgaessner, Stephanie; Giuffrida, Angela (2025-02-03). "Critic of Italy-Libya migration pact told he was target of Israeli spyware". The Guardian . ISSN   0261-3077.
  14. Giuffrida, Angela; Tondo, Lorenzo; Kirchgaessner, Stephanie (2025-02-25). "Italian priest close to pope told he was target of surveillance tool used by a government". The Guardian . ISSN   0261-3077.
  15. Franceschi-Bicchierai, Lorenzo (February 6, 2025). "Spyware maker Paragon terminates contract with Italian government: Media reports". TechCrunch .
  16. Bennett, Tom (6 February 2025). "Spyware firm cuts Italy access after alleged targeting of activists - reports". The BBC .
  17. Benjakob, Omer (2025-06-05). "Italy Admits Hacking Activists With Israeli Spyware Paragon" . Haaretz . Archived from the original on 2025-06-05. Retrieved 2025-06-05.
  18. Kirchgaessner, Stephanie; Giuffrida, Angela (2025-06-12). "European journalists targeted with Paragon Solutions spyware, say researchers". The Guardian . Archived from the original on 2025-06-12. Retrieved 2025-06-12.
  19. Franceschi-Bicchierai, Lorenzo (2025-02-04). "Spyware maker Paragon confirms US government is a customer". TechCrunch . Archived from the original on 2025-07-11. Retrieved 2025-09-02.
  20. Mazzetti, Mark; Bergman, Ronen; Stevis-Gridneff, Matina (2022-12-08). "How the Global Spyware Industry Spiraled Out of Control". The New York Times . ISSN   0362-4331. Archived from the original on 2 Apr 2024.
  21. Panagiotopoulos, Vas. "ICE Signs $2 Million Contract With Spyware Maker Paragon Solutions". Wired.com . ISSN   1059-1028. Archived from the original on 22 Nov 2024.
  22. House, The White (2023-03-27). "FACT SHEET: President Biden Signs Executive Order to Prohibit U.S. Government Use of Commercial Spyware that Poses Risks to National Security". The White House. Archived from the original on January 21, 2025. Retrieved 2023-12-29.
  23. "Executive Order 14093," March 27, 2023, posted March 30, 2023, Federal Register retrieved October 28, 2025
  24. Starks, Tim (2023-03-28). "Analysis | Biden's spyware executive order gets mostly good reviews". Washington Post. ISSN   0190-8286. Archived from the original on March 30, 2023. Retrieved 2023-12-29.
  25. 1 2 Fernandez, Katerina: "ICE, Spyware, and the Constitution: A Call for Reform in Immigration Enforcement," January 17, 2025, Immigration and Human Rights Law Review, retrieved October 29, 2025
  26. Panagiotopoulos, Vas (Oct 21, 2024). "ICE's $2 Million Contract With a Spyware Vendor Is Under White House Review". Wired.com . ISSN   1059-1028. Archived from the original on 23 Mar 2025.
  27. 1 2 "Ice obtains access to Israeli-made spyware that can hack phones and encrypted apps,", September 2, 2025, The Guardian, retrieved October 28, 2025
  28. 1 2 "Trump goes on spyware purchasing blitz to help ICE find people who they claim want to ‘overthrow of the United States Government’," October 17, 2025, The Independent retrieved October 29, 2025
  29. Kirchgaessner, Stephanie (2025-09-02). "Ice obtains access to Israeli-made spyware that can hack phones and encrypted apps". The Guardian . Archived from the original on 2025-09-02. Retrieved 2025-09-02.
  30. "ICE amps up its surveillance powers, targeting immigrants and Antifa," October 17, 2025, Boston Globe, retrieved October 28, 2025; also at Washington Post at: "ICE amps up its surveillance powers..."
  31. "'We need to watch out': Maddow sounds alarm on ICE surveillance as Trump wields new weapon," October 28, 2025, Rachel Maddow Show, MSNBC, retrieved October 28, 2025