Italian Government’s Use of Paragon Spyware: A Complete Inquiry
Background on the Spyware Controversy
An Italian parliamentary committee has confirmed that the government employed spyware developed by the Israeli firm Paragon to surveil several activists involved in rescuing migrants at sea. However, the investigation found no proof that a well-known Italian journalist was among those targeted, leaving significant uncertainties about the full scope of thes cyber operations.
Scope and Findings of COPASIR’s Investigation
The Parliamentary Committee for the Security of the republic (COPASIR) conducted an extensive inquiry into Italy’s use of Paragon’s spyware, known as Graphite. Their report revealed that while some activists were lawfully monitored by intelligence agencies due to suspicions related to illegal immigration facilitation, there was no evidence linking state surveillance efforts to certain journalists who reported receiving warnings from WhatsApp about potential targeting.
Targeted Activists and Legal Surveillance
COPASIR specifically examined cases involving Luca Casarini and Giuseppe Caccia from mediterranea Saving Humans, an NGO dedicated to saving migrants crossing the Mediterranean Sea. The committee concluded their surveillance was legally authorized within investigations concerning alleged illegal immigration activities.
The Unresolved Case of Journalist Francesco cancellato
Despite receiving a WhatsApp alert indicating possible targeting by Paragon spyware,Francesco Cancellato-director of Fanpage.it-was not found in any intelligence agency records or audit logs reviewed by COPASIR. No legal requests for his surveillance were identified from prosecutorial or security departments overseeing Italy’s intelligence services. This leaves open questions about who might have targeted him if not Italian authorities.
technical Insights Into Paragon Spyware Usage in Italy
COPASIR gained access to internal databases and audit trails maintained by AISE (foreign intelligence) and AISI (domestic intelligence), both customers of Paragon until recently terminating their contracts. The report detailed how operators must authenticate with usernames and passwords before deploying Graphite spyware; every operation generates immutable logs stored on customer-controlled servers inaccessible even to Paragon itself.
The foreign intelligence agency AISE began using Graphite in early 2024 primarily for investigating illegal immigration networks, fugitive tracking, fuel smuggling rings, counterterrorism efforts, organized crime disruption, and internal security tasks. Their targets numbered very few but included real-time interception capabilities over encrypted communications apps.
AISI started employing Graphite earlier in 2023 with similar objectives but reportedly conducted more frequent retrievals of stored chat messages than live interceptions before ending its contract slated through late 2025.
Contextualizing Surveillance Practices Amid Global Trends
This case reflects broader global concerns regarding government use-and potential abuse-of complex spyware tools against civil society actors such as journalists and human rights defenders. Such as, recent reports indicate that over 100 countries worldwide have acquired commercial hacking software capable of infiltrating smartphones undetected.Spyware misuse incidents surged nearly 40% globally between 2020-2024 according to cybersecurity watchdogs.
The Italian episode echoes controversies seen elsewhere where governments claim lawful oversight yet face accusations over opaque targeting criteria or collateral damage affecting non-criminal individuals engaged in activism or journalism.
A Closer Look at Fanpage.it’s Investigative Role
Cancellato leads Fanpage.it-a news outlet recognized for impactful investigations including exposés on extremist factions within Italy’s ruling party under Prime Minister Giorgia Meloni revealing racist rhetoric behind closed doors. Such reporting underscores why protecting press freedom remains critical amid rising digital threats posed by state-sponsored hacking tools like those produced by Paragon.
Unanswered Questions & ongoing Investigations
“Who exactly targeted this journalist remains unknown,” said a senior researcher specializing in digital rights abuses currently analyzing Cancellato’s device data alongside independent experts.”
This unresolved issue highlights gaps left open after COPASIR’s report: while it cleared domestic agencies regarding certain targets’ monitoring legality,the possibility exists that foreign governments purchasing similar spyware could be responsible for unexplained intrusions into Italian citizens’ devices without official sanctioning documented domestically.
additions From Recent Notifications & Cases Under Review
- Ciro Pellegrino-a colleague at Fanpage.it-received an Apple notification warning he had been exposed to government-grade malware; however it remains unclear whether this involved Paragon technology specifically or another vendor’s toolset;
- Mediterranea Saving Humans chaplain Mattia Ferrari showed no signs he had been surveilled via this spyware;
- An activist leading Refugees In Libya organization was confirmed as a legitimate target under lawful surveillance protocols but not through use of Graphite software;
- No evidence emerged implicating local prosecutors’ offices or police forces such as Carabinieri or Guardia di Finanza having procured or deployed this particular spyware product despite decentralized procurement powers across jurisdictions;
- The private equity acquisition last year valued at up to $900 million signals growing commercial interest fueling proliferation risks associated with these technologies worldwide;
Evolving Landscape: International Customers & Ethical Safeguards Claimed By Vendors
A recent independent analysis named Australia, Canada, Cyprus, Denmark Israel-and singapore-as probable users purchasing products from companies like Paragon.This raises complex ethical debates around export controls governing offensive cyber capabilities sold commercially versus national security imperatives claimed by buyers seeking advanced investigative tools against serious crimes including terrorism trafficking networks.”




