Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An investigation reveals that two journalists were targeted with Paragon's Graphite mercenary spyware on iOS devices. Forensic analysis confirmed the use of a zero-click attack exploiting a vulnerability (CVE-2025-43200) in iOS 18.2.1. The same attacker targeted both victims, suggesting a coordinated effort against media professionals. The spyware was linked to a specific server and iMessage account. This discovery is part of a broader pattern of spyware use against European journalists, raising concerns about press freedom and digital security. The Italian government acknowledged using Graphite in some cases but denied involvement in targeting certain journalists. The incident highlights the ongoing threat of mercenary spyware to civil society and the need for greater accountability.

The threat involves Paragon's Graphite mercenary spyware targeting iOS devices, specifically exploiting a zero-click vulnerability identified as CVE-2025-43200 in iOS version 18.2.1. This vulnerability allows attackers to compromise devices without any user interaction, leveraging a flaw in the iMessage protocol or related components to silently install spyware. The forensic investigation confirmed that two journalists were targeted, indicating a coordinated campaign against media professionals. The spyware communicates with a specific command-and-control server (IP 46.183.184.91) and is linked to a particular iMessage account, suggesting a sophisticated and targeted attack infrastructure. The Italian government has acknowledged limited use of Graphite spyware but denies involvement in targeting these journalists. This incident is part of a broader pattern of mercenary spyware deployment against European journalists, raising significant concerns about press freedom, privacy, and digital security. The attack vector being zero-click and exploiting a high-profile iOS vulnerability underscores the advanced capabilities of the Paragon group and the ongoing risks posed by mercenary spyware vendors. The lack of public patches or mitigations at the time of discovery further exacerbates the threat landscape for iOS users, especially those in sensitive professions such as journalism.

Detailed information about Graphite Caught: First Forensic Confirmation of Paragon's iOS Mercenary Spyware Finds Journalists Targeted. Get real-time updates, te

Graphite Caught: First Forensic Confirmation of Paragon's iOS Mercenary Spyware Finds Journalists Targeted - Live Threat Intelligence - Threat Radar | OffSeq.com

Title	Severity	Type	Source	Date

Threats Tagged 'zero-click attack'

Filter Threats

Threats Tagged 'zero-click attack'