**WhatsApp**, owned by **Meta**, reported that it has notified approximately 200 users who were tricked into installing a fraudulent version of its iOS application, which was subsequently found to be infected with spyware. According to reports from Italian newspaper *La Repubblica* and news agency *ANSA*, the majority of targeted individuals are located in Italy. The threat actors behind this campaign reportedly employed social engineering tactics to deceive users into installing malicious software disguised as **WhatsApp**. All affected users have been logged out of the compromised app, and **WhatsApp** has advised them to uninstall the malicious applications and download the official **WhatsApp** app. The company has not disclosed specific details regarding the identities of those targeted in these attacks. ### Action Against Asigint The tech giant stated that it is pursuing legal action against **Asigint**, an Italian subsidiary of spyware company **SIO**, for allegedly developing a counterfeit version of **WhatsApp**. **SIO** markets its services to law enforcement agencies, government organizations, and intelligence agencies, offering solutions for monitoring activities, gathering intelligence, and conducting covert operations. ### Previous Incidents Involving SIO In December 2025, *TechCrunch* reported that **SIO** was linked to a series of malicious Android applications that posed as **WhatsApp** and other popular apps. These applications used a spyware family called Spyrtacus to steal private data from targeted devices. It is believed that a government client used these apps to target unknown victims in Italy. **SIO** is among several Italian companies, including **Cy4Gate**, **eSurv**, **GR Sistemi**, **Negg**, **Raxir**, and **RCS Lab**, that sell surveillance tools, transforming Italy into a "spyware hub." ### Prior WhatsApp Targeting Early last year, **WhatsApp** alerted approximately 90 users that they were targeted with **Paragon Solutions'** spyware known as Graphite. In August 2025, the company notified fewer than 200 users who may have been targeted in a sophisticated campaign exploiting zero-day vulnerabilities in iOS and the messaging application. ### Predatorgate Developments These developments follow a Greek court's sentencing of **Tal Dilian**, founder of the **Intellexa Consortium**, and three associates for their involvement in the illegal use of the **Predator** spyware to target politicians, business leaders, and journalists in Greece. The 2022 surveillance scandal, dubbed Predatorgate, led the European Parliament to launch a formal inquiry into the use of such tools. However, a new law passed that year legalized government use under strict conditions. In July 2024, the Greek Supreme Court cleared state intelligence service and government officials of wrongdoing. **Amnesty International** stated, "Questions remain about the role of the Greek government, which has consistently denied purchasing or using Predator. Transparency is a crucial part of accountability – as is remedy for the many victims of the human rights violations brought about by the unlawful use of this technology." **Dilian** stated that he intends to appeal the decision, adding, "I believe a conviction without evidence is not justice, it could be part of a cover-up and even a crime." ### Wider European Spyware Concerns Italy and Greece are not the only European countries affected by spyware technology. In January 2026, Spain's High Court closed its probe into the use of **NSO Group's Pegasus** to spy on Spanish politicians, citing a lack of cooperation from Israeli authorities. The case dates back to May 2022, when the Spanish government revealed that the Israeli company's spyware had been used to eavesdrop on devices belonging to Prime Minister Pedro Sánchez and Defence Minister Margarita Robles. ### Defense of Spyware Use Companies like **Intellexa** and **NSO Group** have consistently maintained that their surveillance technology is licensed to governments to fight serious crimes and bolster national security. **NSO Group's** Executive Chairman David Friedman said the "world is a far safer place" when the company's tools "are in the right hands within the right countries."