Paragon Spyware Control Panel on LinkedIn
An Israeli spyware firm, Paragon Solutions, accidentally exposed its secretive Graphite control panel in a LinkedIn post, drawing sharp criticism from cybersecurity experts. The blunder offers a rare glimpse into the tool’s operations targeting encrypted communications.
Cybersecurity researcher Jurre van Bergen spotted the image posted by Paragon’s general counsel on LinkedIn on February 11, 2026. The screenshot revealed a dashboard displaying a Czech phone number labeled “Valentina,” active interception logs from February 10, 2026, and interfaces for monitoring encrypted apps like WhatsApp via zero-click exploits.
Citizen Lab researcher John Scott-Railton dubbed it an “epic OPSEC fail,” underscoring how such lapses compromise operational security in the spyware industry. Despite quick deletion, the image spread rapidly online, amplifying scrutiny on Paragon’s shadowy practices.
Founded in 2019 in Israel, Paragon markets Graphite as sophisticated surveillance software, granting remote access to cell phones. Dubbed “mercenary spyware,” it infiltrates devices without user interaction, extracting messages from apps like WhatsApp and Signal, stored data, and live communications.
Unlike NSO Group’s Pegasus, Paragon positions Graphite as a “cleaner” alternative, but allegations persist of its use against journalists and activists.
WhatsApp accused Paragon in early 2025 of targeting 90 journalists and civil society figures via zero-click vulnerabilities, including Italian editor Francesco Cancellato of Fanpage.it. Citizen Lab linked Graphite to infrastructure in Israel and confirmed forensic artifacts like “BIGPRETZEL” on infected Android devices.
Paragon’s clients include governments in Australia, Canada, Cyprus, Denmark, Israel, and Singapore, per Citizen Lab analysis. In January 2025, the Trump administration publicly noted U.S. government purchases of Graphite to support ICE operations.
Civil rights groups documented Graphite deployments in Canada, including Ontario, raising human rights alarms over surveillance of activists. Italy and other nations have faced backlash for contracts amid targeting of critics.
This exposure highlights persistent OPSEC risks in an industry notorious for secrecy. While Paragon claims ethical sales only to vetted governments, incidents like the WhatsApp hacks and LinkedIn slip erode that narrative.
Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.
Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…
Hackers are making some phishing pages harder to track by changing the code delivered to…
A cyber incident reportedly forced a British power plant to halt operations for about four…
Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…
TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…
A fake student resume is being used to place a remote-access tool on researchers’ Windows…