Italian Regulator Warns Against Unlawful Spyware Use

The italian Data Protection Authority (Garante) has issued a stark warning against the misuse of Graphite spyware, following reports of widespread hacking campaigns targeting journalists and human rights activists.

Graphite: A Powerful Tool with Potential for Abuse

Graphite is a zero-click spyware capable of intercepting messages from various encrypted messaging platforms, including WhatsApp, telegram, and Signal. This highly sophisticated tool, whose capabilities are comparable to NSO Group’s Pegasus software, can be deployed without any user interaction, raising serious concerns about privacy violations and potential misuse.

the Italian Connection: Targeted Attacks and Government Surveillance

Reports indicate that 90 journalists and civil society members across over two dozen countries, including seven Italian citizens, became victims of these hacking attempts.

“Interceptions of electronic communications that do not fall within the purposes of security of the Republic and of prevention, investigation, detection, and prosecution of crimes, must comply with the legislation on the protection of personal data,” the Garante emphasized.

Grave Consequences for Non-Compliance

The Italian regulator stressed that unauthorized use of Graphite for purposes beyond security and law enforcement can result in hefty fines of up to €20 million or 4% of the company’s annual turnover, underlining the seriousness of the situation.

Meta’s Response: Cease and Desist Notice and Legal Action

WhatsApp, aware of the severity of the attacks, disrupted hacking attempts utilizing Graphite in December. Meta, WhatsApp’s parent company, has taken further action by sending a cease and desist notice to Paragon, the Israeli firm behind Graphite, and is exploring legal avenues to hold them accountable.

Paragon’s Response and Government Contracts

Paragon, founded by former Israeli Prime Minister Ehud Barak, recently sold to american private equity firm AE Industrial for $900 million, maintains that it has approximately 35 government clients, including potentially the Italian government. However, the Italian government denies terminating its contract with Paragon, stating that the service remains active.

The Way Forward: ensuring Responsible Use and Accountability

This incident highlights the urgent need for stringent regulations governing the progress and deployment of powerful surveillance tools. Businesses and governments must prioritize ethical considerations and ensure transparency in their use of such technology. Robust cybersecurity measures and public awareness campaigns are also crucial to mitigate the risks associated with spyware and protect individual privacy in an increasingly digital world.

Given the potential for Graphite spyware to be misused, what steps can individuals take to protect themselves from becoming victims?

Interview with Dr. Guido Mantovani, Cybersecurity Specialist & earthquakes Professor at the university of Milan,Italy

Tool for Good or Evil?

Dr. Mantovani, Graphite spyware has made headlines for its powerful capabilities and worrying misuse. Could you start by briefly explaining what makes this tool so unique?

Dr. Guido Mantovani: “Certainly. Graphite is a highly advanced zero-click spyware that can intercept messages from encrypted messaging platforms like WhatsApp, Telegram, and Signal without any user interaction. Its stealthy capabilities make it exceptionally perilous in the wrong hands.

Italian Connection: Targeted Attacks and Potential Misuse

With several Italian citizens reportedly affected, how meaningful is this individual surveillance issue for Italy?

Dr. Guido Mantovani: “Italy being one of the countries with the highest number of victims underscores the gravity of the situation. The crypto-agility displayed by Graphite poses a significant threat to privacy rights and press freedom, both of which are fundamental rights in Italy.

What do you think about the Garante’s warning and the potential fines for unauthorized use?

Dr. Guido Mantovani: “The Garante’s clear stand against unlawful surveillance is commendable. Such stringent penalties are necessary to deter potential misuse. But we must ensure that these deterrents don’t stifle legitimate investigative and law enforcement activities.

Meta’s response and the Road Ahead

WhatsApp has been proactive in tackling Graphite’s misuse. Do you think other tech companies should follow suit?

Dr. Guido Mantovani: “Absolutely. Tech giants should embrace a more proactive stance against spyware misuse. They should invest in robust security measures and collaborate with governments and NGOs to tackle this alarming trend.

The way Forward: Ensuring Ethical Use

what steps can societies take to protect individual privacy, given the rapid evolution of spyware technology?

Dr. Guido Mantovani: “Firstly,a global regulatory framework governing spyware deployment is imperative. Secondly, transparency is key – companies and governments must disclose when and how they’re using these tools. Lastly,public awareness and engagement in digital security are crucial for collective protection.

Dr. Mantovani, thank you for sharing your insights. Our readers eagerly await your thoughts on this topic.