Why You Should Update WhatsApp Right Now
A software patch for the Facebook-owned messaging platform can block spyware that targets smartphone data
WhatsApp, the Facebook-owned messaging platform, is encouraging its 1.5 billion users worldwide to update their app immediately to patch a spyware vulnerability that could allow outside access to data from consumers’ phones.
“WhatsApp encourages people to upgrade to the latest version of our app, as well as keep their mobile operating system up to date, to protect against potential targeted exploits designed to compromise information stored on mobile devices,” a company spokesperson wrote in an e-mail to Consumer Reports.
An attacker can install Pegasus on a target phone by simply placing a WhatsApp call to the victim, even if the victim doesn’t pick up the call. The attacker can then gain access to the phone’s camera and microphone, as well as e-mails, messages, location data, and more.
“Once exploited via this new attack, the attacker has complete control and visibility of all data on the phone,” says Mike Campin, vice president of engineering for Wandera, a firm that specializes in mobile security for corporate clients.
“In tech security circles, this is called ‘privileged remote code execution,’” says CR’s Richter. “It’s really a worst-case scenario for the victim because of the sheer amount of information and control gained by the attackers.”
WhatsApp says it is providing information about the security vulnerability to both U.S. law enforcement and a number of human rights organizations.
Security experts say this incident should serve as a reminder that even supposedly secure digital platforms can sometimes be hacked. “Bear in mind that this isn’t the first time WhatsApp’s security has been brought into question,” says Campin, citing a spate of recent phishing attacks on the platform. “WhatsApp’s ‘end-to-end-encryption’ badge shouldn’t be mistaken as a guarantee that communications are secure.”
Smartphone Privacy Protection
A smartphone can be an incredibly useful device—but what do all those apps do with your information? On the "Consumer 101" TV show, Consumer Reports expert Justin Brookman explains how you can protect your privacy.
