U.S. Immigration and Customs Enforcement holds a $2 million contract for Paragon Solutions' Graphite spyware, which can compromise phones through zero-click exploits to access encrypted apps like WhatsApp and iMessage. Acting Director Todd Lyons told lawmakers the tool is used by Homeland Security Investigations to combat fentanyl trafficking and complies with a 2023 executive order on commercial spyware, without naming Paragon directly. Democratic Representatives Summer Lee, Shontel Brown, and Yassamin Ansari sent a letter calling for oversight, and EFF researcher Cooper Quintin warned the agency's language could allow it to use administrative subpoenas, rather than judicial warrants, to deploy the spyware. The contract was signed in 2024, paused under the Biden administration, and reactivated in 2025; Paragon was acquired by U.S. private equity firm AE Industrial Partners in a deal reportedly worth up to $900 million.