WhatsApp call is enough to start snooping

[НСК-СБ]

WhatsApp call is enough to start snooping
May 15, 2019

Recently discovered vulnerability zero day WhatsApp - the most popular messenger in the world - allows hackers to eavesdrop on user conversations, read their encrypted chats, turn on the microphone and camera, and also install spyware , which opens up even more opportunities for surveillance. With it, you can, for example, view photos and videos of victims, a list of their contacts, and so on. Even worse, to exploit this vulnerability, a hacker just needs to call you on WhatsApp.

What is known about the new WhatsApp vulnerability
So far, there is not too much reliable information about the bug. It’s well known that a specially configured WhatsApp call can provoke buffer overflow , which will allow hackers to take control of the application and execute arbitrary code in it.

It seems that the attackers used this method not only to view chats and eavesdrop on conversations, but also to exploit previously unknown vulnerabilities in the operating system that allow installing new applications on the device. This is exactly what the attackers did: they downloaded spyware, spyware, into the system.

According to Facebook (WhatsApp belongs to this company), the vulnerability already fixed . It is present in WhatsApp for Android up to version v2.19.134, WhatsApp Business for Android up to version v2.19.44, WhatsApp for iOS up to version v2.19.51, WhatsApp Business for iOS up to version v2.19.51, WhatsApp for Windows Phone up to version v2.18.348 and WhatsApp for Tizen up to version v2.18.15. In a word, only the latest versions of the application are safe. The bug was removed only a couple of days ago.

At the same time, attempts to exploit this vulnerability have already been noticed. WhatsApp Security has taken measures to block such server-side attacks. However, as many people and who exactly managed to become a victim of espionage, has not yet been disclosed.

It is also not clear what kind of spyware the attackers installed in the second stage of the attack. Nevertheless some experts suggest that it could be a malware Pegasus , notorious for its widespread ability to infect a variety of devices, including iOS.

It is worth mentioning that such vulnerabilities are difficult to exploit and that Pegasus (if it really was Pegasus) is a very expensive and complex malware that is mainly used by hacker groups with state support. Ordinary users of attackers of this kind are rarely interested, so most likely so far this vulnerability has been used only for attacks on “large targets”. However, there is always a chance that spyware will leak into the network and someone else will use it, so in any case, you should take care of your security.

How to defend against attacks through WhatsApp
So far, the best way to protect yourself is to update WhatsApp. To do this, go to the Apple App Store or Google Play, find WhatsApp and click Refresh . If the “Update” button is missing, but you see the “Open” button, it means that you already have the latest version of WhatsApp, which is protected from such attacks.

We will update this article when we have more information about this attack or about defenses against it.
WhatsApp call is enough to start snooping

 

[Детективное агентство Одесса]

I never thought about it and did not know. The call can let you down)

 

[seventeam]

I never thought about it and did not know. The call can let you down)

Yes, 1 call)