WhatsApp confirms no users were impacted by new vulnerability

The outcome of the vulnerability is similar to that of the recent Pegasus exploit, which allowed hackers to infiltrate and gain control over a user’s phone by simply placing a missed call. However, in this case the user will have to actually download the MP4 file that is being sent to him or her, which makes it slightly easier to monitor manually than the Pegasus exploit earlier.

MORE FROM THIS SECTIONSee All

Amazon wins court fight against Parler, Judge says it's antitrust violation

3 min read . 08:30 AM IST

Twitter, Facebook brief Parl panel on prevention of social media platform misuse

1 min read . 06:29 AM IST

Facebook’s Oversight Board to look into indefinite ban on Trump’s accounts

1 min read . 21 Jan 2021

India 5G smartphone shipment to touch 38 million units in 2021: Report

1 min read . 21 Jan 2021

All you need to do is make sure you’re not downloading such files from unknown sources. MP4 file formats are often used to share songs and other audio files. “The script is executed only when the user has downloaded the file," explained ethical hacker and web security researcher Ehraz Ahmed.

Since the attacker can execute any code they want on your phone, this vulnerability too would allow them to look at your texts, listen to you using your phone’s microphones etc, at least theoretically. “What code will run on your system will depend entirely on what level of access the attacker is looking for," Ahmed added.

However, WhatsApp has confirmed that a patch had been issued for this vulnerability earlier, and that no users were harmed. “WhatsApp is constantly working to improve the security of our service. We make public, reports on potential issues we have fixed consistent with industry best practices. In this instance there is no reason to believe users were impacted," a WhatsApp spokesperson told Mint.

According to CERT and Facebook’s advisories on the loophole, the following WhatsApp versions are affected by the vulnerability.

• WhatsApp for Android prior to 2.19.274
• WhatsApp for iOS prior 2.19.100
• WhatsApp Enterprise Client prior to 2.25.3
• WhatsApp for Windows Phone prior to 2.18.368
• WhatsApp Business for Android prior to 2.19.104
• WhatsApp Business for iOS prior 2.19.100

That means if you are on any of these versions of WhatsApp, you should update to newer versions of the app. The current version of WhatsApp on Google Play seems to be version 2.19.330, while the iOS version stands at version 2.19.112.