An Italian investigative journalist known for uncovering young fascists within Prime Minister Giorgia Meloni’s far-right party was targeted by spyware developed by "Israel"-based Paragon Solutions, according to a notification he received from the application.

Francesco Cancellato, editor-in-chief of the investigative news outlet Fanpage, became the first to publicly disclose being targeted after WhatsApp announced on Friday that “90 journalists and other members of civil society” had been affected.

Like many others whose identities remain unknown, Cancellato confirmed receiving the alert from the messaging platform on Friday afternoon.

WhatsApp, owned by Meta, has not revealed the identities or locations of those targeted but stated that they are spread across “more than two dozen countries, including in Europe.”

Driving the news

WhatsApp revealed that it had identified Paragon targeting its users in December and swiftly shut down the method used to “possibly compromise” individuals. Like other spyware manufacturers, Paragon sells its surveillance tool, known as Graphite, to government agencies, which are expected to deploy it for crime prevention and security purposes.

The spyware was reportedly delivered by adding targets to group chats without their consent and sending them malware through PDFs. Paragon’s technology is classified as no-click spyware, meaning a user does not need to interact with any link or attachment for their device to be infected—it is installed remotely.

It remains unclear how long Francesco Cancellato may have been under surveillance. However, last year, he published a major investigative report exposing how members of the youth wing of Prime Minister Giorgia Meloni’s far-right party engaged in "fascist chants, Nazi salutes, and antisemitic rhetoric."

Although Cancellato was not personally involved in the undercover operation, Fanpage reporters infiltrated online groups and forums used by members of National Youth, the youth branch of Meloni’s Brothers of Italy party. The outlet released footage in May showing members chanting “Duce” in reference to Benito Mussolini, shouting “sieg Heil,” and boasting about familial ties to figures associated with neo-fascist terrorism.

Cancellato, 45, told The Guardian that he had no reason to suspect in December that his phone had been compromised, and had never been informed by authorities that he was under investigation. He described the news as a “violation.”

“We just began the technical analysis on the device in order to evaluate the actual extent of this attack, what was actually taken or spied on, and for how long. Obviously, it is also in our interest to know, if it’s possible to do so, who ordered this espionage activity,” he told The Guardian.

The revelations sparked criticism of Meloni’s party both in Italy and at the European level.