A report by The Citizen Lab suggests certain countries, including Australia, Canada, Cyprus, Denmark, Israel, and Singapore, are likely customers of Paragon Solutions, an Israeli spyware maker.
Paragon has been involved in scandals, including WhatsApp notifying users of being targeted with Paragon spyware, leading to investigations.
The company has tried to position itself as a responsible vendor, claiming not to sell to authoritarian regimes.
Recently, reports indicated that U.S. venture capital firm AE Industrial Partners acquired Paragon for at least $500 million.
Citizen Lab uncovered details on Paragon's spyware tool Graphite, identifying servers linked to suspected customer countries based on certificates and server locations.
The report highlights an operational mistake by Paragon, pointing to a digital certificate registered to Graphite.
Citizen Lab noted other potential governmental customers of Paragon, including Canada's Ontario Provincial Police.
TechCrunch reached out to several governments and Paragon for comments, but received limited responses and denials of inaccurate information.
Meta confirmed the association of a spyware indicator called BIGPRETZEL with Paragon, emphasizing the need to hold spyware companies accountable.
Despite challenges in detecting Paragon's spyware, Citizen Lab stresses the importance of collaboration and information sharing to combat such threats.