WhatsApp is affected by a serious vulnerability that allows attackers to remotely inject malware into Android and iOS smartphones. According to The Financial Times, this flaw was exploited by NSO Group, a highly secretive Israeli firm that developed its own tool, Pegasus, to exploit it. However, NSO Group mainly sells its services to Western and Middle Eastern intelligence agencies.
WhatsApp hijacked by spyware, a patch available
Pegasus is spyware that can spy on a smartphone’s microphone and camera, in addition to absorbing emails and messages and collecting location data. In the past, members of human rights organizations have been targeted by this spyware. The procedure is the same every time: the victim receives a message on WhatsApp with a link that causes Pegasus to be installed.
“This attack is by a private company known to collaborate with governments to provide spyware believed to be capable of controlling the functionality of mobile operating systems.”explains WhatsApp in a press release. And to add: “We have instructed several human rights organizations to share the information we can and work with them to alert civil society”.
WhatsApp was also quick to release a security patch. The firm’s servers were patched on Friday before a security patch was offered on Monday. It is highly recommended that you update your application as soon as possible. You can do this by going directly to the Play Store or App Store or by downloading the latest APK of the app, if available, from the link below.
