Apple and WhatsApp are reaffirming their commitment to notify users targeted by government-sponsored hacking tools, even in the United States. This decision arises amidst heightened worries regarding Israeli-founded spyware companies that have intensified ties with Donald Trump’s associates and have drawn interest from US government agencies. Both organizations reiterated their position following a report indicating that Paragon Solutions and NSO Group—two controversial Israeli spyware developers, now predominantly owned by American investors—are aiming to broaden their presence in Washington. The timing is noteworthy: Paragon has reportedly established a partnership with the Trump administration that allows US immigration officials access to its sophisticated hacking tool, Graphite.
Concurrently, NSO Group, infamous for its Pegasus spyware, has appointed David Friedman, former ambassador to Israel under Trump, as executive chairman of its holding company. While Paragon and NSO assert that their technologies are intended to assist governments in combating terrorism and organized crime, their software has frequently been misused to monitor journalists, activists, and political dissidents worldwide. Apple and WhatsApp remain steadfast in their stance on privacy. They have declared that their privacy policies will not change. Apple emphasized that threat notifications are meant to inform and aid users who may have been targeted by mercenary spyware, regardless of geographic location.
A WhatsApp representative echoed this, underscoring that user protection is the company’s foremost priority by countering hacking attempts, enhancing security measures, and alerting individuals whose devices are under threat, irrespective of their location. Both tech companies have taken decisive legal and technical measures against spyware developers. WhatsApp, which is part of Meta, achieved a significant legal victory in October when a US judge permanently barred NSO Group from targeting its users, concluding six years of litigation. Apple has similarly issued threat notifications to various individuals—from journalists in India to opposition leaders in Spain—upon detecting evidence of mercenary spyware. Paragon’s agreement with US Immigration and Customs Enforcement (ICE) has sparked concerns among lawmakers.
Initially established during the Biden administration in 2024, the contract was suspended after reports indicated that Graphite spyware had been misappropriated to hack nearly 90 journalists and activists in Italy. The company subsequently terminated its contract in Italy, citing violations of service terms. However, the agreement was reinstated in September under Trump’s administration. Senator Ron Wyden, a prominent opponent of unchecked surveillance, expressed deep concern about how ICE might utilize spyware and facial recognition technology to infringe upon the rights of Americans and those labeled as adversaries by Trump. Simultaneously, NSO Group—previously blacklisted by the Biden administration in 2021 for actions deemed contrary to US national security—seeks to rehabilitate its image.
With new American investors, including Robert Simonds, and Friedman leading the charge, the firm is reportedly aiming to have its sanctions lifted. Friedman told reporters in Israel, “I hope that will be accomplished, but we haven’t made that request yet.” Cybersecurity experts caution that the resurgence of such companies poses significant dangers. John Scott-Railton from Citizen Lab warned, “Nobody is safe when it comes to mercenary spyware.” The message from Apple and WhatsApp remains clear: their battle against spyware will persist, regardless of the source.
