Secure Messaging No More: WhatsApp Urging Users to Update App After Attack

By

Facebook-owned WhatsApp is the latest to become a victim of today’s online security black hole. While no organizations big or small are safe from potential attacks, the messaging service has long been touted as a safe place to send fully encrypted messages, and is a top choice for users in nations across the globe when it comes to messaging and chat.

That all changed earlier this month when news was released that the application had been compromised. The company is urging its 1.5B users worldwide to now update the applications on their devices as a precaution.

Here’s What We Know
Israeli company NSO’s Pegasus spyware created the vulnerability, which essentially installed malware on devices that could spy on everything from messages, to activating the microphone and even logging keystrokes. Facebook confirmed the malware installation could happen on any operating system and didn’t require a target to click a phishing link to install it. A simple phone call to the device could begin the attack.

The company is yet to determine exactly who was the main target for these attacks and how many people were affected but does believe it was a very targeted attack at a specific group.

Its programs are typically used by government groups to fight crimes and terrorism.

In an advisory submitted to security specialists, the company described the vulnerability as being, “a buffer overflow vulnerability in WhatsApp VOIP stack permitted remote code execution via specially crafted series of SRTCP packets which were sent to target phone number.”

What Now?
The company included a patch in its latest version so it’s vital all users update to the latest version to eliminate the chances of a breach.

For the every-day user, end-to-end encryption for chat and messaging are still the best route when it comes to having secure conversations - so don’t go deleting the app just yet. However, this is a good reminder to keep your operating systems updated and to download the latest patches and versions for any software you run to ensure the best protection.




Edited by Maurice Nagle
Get stories like this delivered straight to your inbox. [Free eNews Subscription]
SHARE THIS ARTICLE
Related Articles

ChatGPT Isn't Really AI: Here's Why

By: Contributing Writer    4/17/2024

ChatGPT is the biggest talking point in the world of AI, but is it actually artificial intelligence? Click here to find out the truth behind ChatGPT.

Read More

Revolutionizing Home Energy Management: The Partnership of Hub Controls and Four Square/TRE

By: Reece Loftus    4/16/2024

Through a recently announced partnership with manufacturer Four Square/TRE, Hub Controls is set to redefine the landscape of home energy management in…

Read More

4 Benefits of Time Tracking Software for Small Businesses

By: Contributing Writer    4/16/2024

Time tracking is invaluable for every business's success. It ensures teams and time are well managed. While you can do manual time tracking, it's time…

Read More

How the Terraform Registry Helps DevOps Teams Increase Efficiency

By: Contributing Writer    4/16/2024

A key component to HashiCorp's Terraform infrastructure-as-code (IaC) ecosystem, the Terraform Registry made it to the news in late 2023 when changes …

Read More

Nightmares, No More: New CanineAlert Device for Service Dogs Helps Reduce PTSD for Owners, Particularly Veterans

By: Alex Passett    4/11/2024

Canine Companions, a nonprofit organization that transforms the lives of veterans (and others) suffering PTSD with vigilant service dogs, has debuted …

Read More