\n<\/p>\n
Italian authorities confirmed that a journalist who was alerted by WhatsApp last year of a suspected spyware attack on his phone was indeed hacked.\u00a0<\/p>\n
In a press release sent to journalists on Thursday, the public prosecutors\u2019 offices in Rome and Naples, which are investigating the spyware scandal in the country, said that a technical report concluded that the phones of journalist Francesco Cancellato<\/a> and of immigration activists Giuseppe Caccia<\/a> and Luca Casarini<\/a> all showed traces of having been infected with spyware in the \u201cearly hours\u201d of December 14, 2024.\u00a0<\/p>\n \u201cThe execution of three consecutive attacks on the same night suggests that they may have been part of the same infection campaign,\u201d the technical report said, according to the press release.\u00a0<\/p>\n The full report is not yet public.<\/p>\n This is the first independent confirmation that Cancellato, who is the director of the news website Fanpage, was hacked with spyware. In January 2025, Cancellato and around 90 other people, including journalists and members of civil society, were alerted by WhatsApp<\/a> that they had been targeted with spyware made by Paragon Solutions, an Israeli-based company now owned by American private equity firm AE Industrial<\/a>.\u00a0<\/p>\n According to the press release, Italian judicial authorities inspected the Paragon spyware server used by the intelligence agency AISI to target the phones of its targets. While the judicial authorities found evidence of operations against Caccia and Casarini, it found no evidence of an operation against Cancellato.\u00a0<\/p>\n It remains unclear who hacked Cancellato\u2019s phone.<\/p>\n \t\t\tDo you have more information about Paragon, and this or other spyware campaigns? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or email<\/a>.<\/a>\t\t<\/div>\n By June 2025, an investigation by the Italian Parliamentary Committee for the Security of the Republic, known as COPASIR, concluded that Italian intelligence agencies had lawfully targeted Caccia and Casarini<\/a>, but the committee found no evidence of a hack against Cancellato.\u00a0<\/p>\n The prosecutors\u2019 offices said they will continue to investigate to identify Cancellato\u2019s hackers.\u00a0<\/p>\n The Italian government, led by far-right prime minister Giorgia Meloni, has denied<\/a> being behind the hack on Cancellato. In response to a question by the journalist during a press conference in January, Meloni only said that her government \u201cis offering all its assistance and all the answers it can provide to help clarify this issue.\u201d<\/p>\n The Italian government did not respond to TechCrunch\u2019s request for comment.<\/p>\n \u201cWe are asking for clarity,\u201d Cancellato said in an article<\/a> on Thursday. \u201cAnd we have not received it from the government, which has remained silent whenever possible for a year. And when it didn\u2019t remain silent, it told lies.\u201d<\/p>\n John Scott-Railton, one of the Citizen Lab researchers who investigated the Paragon cases in Italy, said that the new revelation about Cancellato\u2019s hack \u201craises serious questions about why no confirmation was surfaced in prior official investigations by the Italian authorities.\u201d<\/p>\n In response to the scandal, Paragon, whose spyware is called Graphite, canceled its contracts<\/a> with its Italian government customers.\u00a0\u00a0<\/p>\n Apart from Caccia, Casarini, and Cancellato, there were several other<\/a> people<\/a> in Italy who were identified as spyware targets, including Ciro Pellegrino, who also works at Fanpage and was alerted of a suspected attack on his iPhone by Apple<\/a> last year. Researchers at the Citizen Lab later concluded that Pellegrino was hacked with Paragon spyware<\/a>.<\/p>\n The technical report mentioned by the prosecutor\u2019s offices, however, said it only found evidence of spyware on the phones of Caccia, Casarini, and Cancellato, but not Pellegrino and another four people who are alleged victims.\u00a0<\/p>\n \u201cI\u2019m pretty disconcerted,\u201d Pellegrino, who said he has not seen the full technical report yet, told TechCrunch. \u201cHow is it possible that Citizen Lab, an authority on spyware, found evidence that Paragon\u2019s Graphite was on my phone, while the Italian prosecutors\u2019 experts did not? And why would Apple send me the alerts? For fun?\u201d<\/p>\n The prosecutor\u2019s offices in Rome and Naples did not respond to a request for comment.\u00a0<\/p>\n A spokesperson for the Polizia Postale, which is investigating the case, referred TechCrunch to the prosecutor\u2019s offices.\u00a0<\/p>\n Paragon, which as of last year had an active contract<\/a> with the U.S. Immigration and Customs Enforcement (ICE), and REDLattice, a company that merged with the spyware maker after the acquisition by AE Industrial, did not respond to a request for comment.\u00a0<\/p>\n Italy is the most recent European country in recent years to have been embroiled in a spyware scandal, after similar cases in Greece, Hungary, Poland, and Spain.\u00a0<\/p>\nContact Us<\/h4>\n
Spyware scandals spread across Europe<\/h2>\n