Update right now! A vulnerability in WhatsApp lets attackers silently install spyware

EnlargeSanteri Viinamäki

WhatsApp told the BBC its security team was the first to identify the flaw, and shared that information with human rights groups, selected security vendors and the U.S. Department of Justice earlier this month.

WhatsApp has recently corrected a serious vulnerability that allowed any attacker to install a spyware on the victim's smartphone (Android and iOS) without his knowledge.

"The company does not operate the system, and after a rigorous licensing and vetting process, intelligence and law enforcement determine how to use the technology to support their public safety missions". It also said it had briefed human rights organisations to work with them to notify civil society.

The Facebook-owned messaging service said it believed certain users were targeted through the vulnerability by an advanced cyber actor.

Several human rights lawyers and campaigners were targeted by the spyware, known as Pegasus. NSO Group, an Israeli cyber arms firm behind the development of spyware Pegasus, is known for selling such commercial spyware to governments and intelligence agencies.

It is unclear as to how long this exploit was known by hackers and how many people were affected by it. WhatsApp, however, says that it expects only a limited number of users to be affected by it since carrying out the hack is relatively hard and requires motivated hackers and actions. So if you see an update is available for WhatsApp, it is highly recommended that you install it on all of your devices. NSO would not, or could not, use its technology in its own right to target any person or organisation, including this individual. Following the Monday announcement, Amnesty International said it would join the effort to force Israel's defense ministry to suspend NSO's export license.

WhatsApp claims it has worked "around the clock" to develop a patch to protect users from the exploit, finally releasing the fix on Monday.

Experts said the case highlighted the ability of sophisticated attackers to exploit gaps in code to view messages on a target's phone even if those messages were safely encrypted in transit.

If you have an iPhone, go to the App Store and click updates.

Under My apps and games, tap update next to WhatsApp Messenger. The lawyer, who was not identified by name, is involved in a lawsuit against NSO brought by a group of Mexican journalists, government critics and a Saudi Arabian dissident.

Related:

Comments

Latest news

Apple Releases New TV App
Apple has released the latest updates to its different operating systems including for Apple TV and the Apple Watches. Started content will also show up under Up Next under the Watch Now tab in the TV app.

Realme X, Realme X Lite launched in China: Price, specifications
The device is Realme's first smartphone to feature an in-display fingerprint sensor and a motorised pop-up selfie camera. Unlike the no-notch dispaly of the Realme X, this one comes with a dewdrop notch and offers an aspect ratio of 19.5:9.

Four officers in Trump motorcade involved in crash
The Secret Service says four officers were involved, and three of them were taken to a hospital to be treated for minor injuries. Images of the crash show one officer in a grassy area between two lanes on the highway, apparently in the process of sitting up.

How Arsenal Transfer News Affect Their Odds to Win?
Other players rumored to be destined for Arsenal include; Sokratis Papastathopoulos, from Borussia Dortmund, and Saul Niguez. If they are rumored to buy an elite player, during the transfer window, they play well which increases the odds of winning.

Celebrities Who Suffer With Chronic Diseases
Now if that isn’t the epitome of what a BFF is, I don’t know what is! Selena continues to be on chronic medication. There is also a huge list of celebrities past like famous painter vincent Van Gogh who suffered with this disease.

Other news