If you haven’t heard, there’s a big problem with the popular chat app WhatsApp. Facebook, who owns WhatsApp is strongly advising users to update the application immediately. It seems there is a vulnerability that is actively being exploited that allows the attackers to remotely install software that can be used to spy on users. This is applicable to Android, iOS, Windows Phones, and even Tizen devices. The flaw can allow attackers to do this by simply placing WhatsApp phone calls to a targeted number.
If the spyware makes it onto a device, it can steal data without any user interaction whatsoever. It can also erase any evidence of the incoming call from the device’s logs, so it can be difficult, if not impossible to discover.
The versions of the app that are currently affected include:
- Android prior to v2.19.134
- Business for Android before v2.19.44
- iOS prior to v2.19.51
- Business for iOS before v2.19.51
- Windows Phone versions before v2.18.348
- Tizen prior to v2.18.15
An update was released May 10, 2019 and users are urged to apply it immediately to protect themselves from this. It’s advised that not only for this, but for any app that updates are applied as soon as they are released so that users are protected as much as possible from known and unknown attacks. If you don’t see an update for it in your list, refresh it and try again. If you still don’t see it, try contacting your mobile device service provider to find out if there is any delay and urge it to release the app.
According to the Financial Times, this particular attack has been used to install spyware developed by the Israel-based company NSO Group. This organization’s products have been linked to some questionable uses, including against human rights activists in multiple countries. It has also reportedly been used for other questionable purposes.
NSO claims that is ensures its technology is used only by authorized government agencies strictly for crime and terror law enforcement.
For banks and credit unions
Share this article with your members
Copy a ready-made summary and link for your newsletter, website or social posts.
