ICE Secures $2 Million Contract for Zero-Click 'Graphite' Spyware
The agency's acquisition of high-end surveillance tools from Paragon Solutions enables device compromise without user interaction.
U.S. Immigration and Customs Enforcement (ICE) has secured a $2 million contract to deploy a sophisticated surveillance tool known as Graphite. The acquisition marks a significant escalation in the agency's digital surveillance capabilities, granting it the power to compromise mobile devices covertly.
The software, provided by the Israeli firm Paragon Solutions, utilizes "zero-click" exploits to infiltrate phones. Unlike traditional hacking methods that require a user to click a malicious link or open a fraudulent attachment, Graphite can compromise a device without any interaction from the target. Confirmed reports indicate this can be achieved through methods such as sending infected PDF files into WhatsApp groups, which then execute the exploit automatically upon receipt.
The Procurement Process
The contract was initially signed under the Biden administration, though its rollout faced internal friction. In October 2024, the agreement was briefly frozen to undergo a compliance review. However, the Department of Homeland Security subsequently reactivated the contract, clearing the way for ICE to integrate the tool into its operational toolkit.
A Shift in Surveillance
Zero-click exploits represent some of the most potent weapons in the cyber-surveillance arsenal, mirroring the capabilities of the infamous Pegasus spyware developed by the NSO Group. By bypassing traditional security warnings and user caution, these tools allow agencies to maintain total invisibility on a target's device. For a domestic agency like ICE, the adoption of such technology suggests a strategic shift toward more aggressive digital intelligence gathering within immigration enforcement.
Privacy and Oversight Concerns
The deployment of Graphite raises acute civil liberties and privacy concerns. Because zero-click tools leave minimal traces and require no action from the victim, they can be deployed with extreme stealth. Critics argue that such capabilities could potentially be used to bypass traditional judicial oversight or the standard warrant processes typically required for the seizure of digital evidence, as the intrusion occurs without the user's knowledge or the possibility of defense.
Future Implications
As ICE integrates Graphite into its operations, the focus now shifts to how the agency will govern the use of the tool. It remains to be seen what specific safeguards are in place to prevent misuse or how the Department of Homeland Security will ensure the software is used strictly within legal boundaries. The reactivation of the contract after a compliance freeze suggests the government views the utility of the tool as outweighing the initial regulatory concerns.