Zero-click spyware that owns a phone with no tap required.
Graphite is Paragon's mercenary spyware: it infects a target's smartphone with no interaction — via apps like WhatsApp — then silently exfiltrates messages, files, and live data. Citizen Lab documented it deployed against journalists.
What it does
▸Zero-click infection
▸Message & file exfiltration
▸Covert persistence
▸Live device access
Where it's deployed
◍Government clients (incl. US agencies, reported)
Abuses & incidents
Abuse
Graphite spyware caught targeting journalists
2025
Citizen Lab documented Paragon's Graphite zero-click spyware infecting the phones of journalists and civil-society targets — the same mercenary-spyware abuse Paragon marketed itself as being above.
