WhatsApp confirmed that hackers succeeded in installing a surveillance software of phones and PCs to enable them to spy on other users’ supposed encrypted chat.
WhatsApp, owned by Facebook, alleged that the attack targeted a selected number of users, probably human rights activists, journalists, and lawyers. WhatsApp believes that the attack was orchestrated by NSO Group, an Israeli cyber company. The messaging app announced on Monday that the vulnerability has been fixed and urged the users to update the latest version of the app.
Malicious code could be implanted in the victim’s phone by placing a call to that phone. The victim does not need to answer the call for the phone to be hacked.
“The attack has all the hallmarks of a private company reportedly that works with governments to deliver spyware that takes over the functions of a mobile phone operating systems,” a spokesperson said in a statement. The instant messaging app promotes itself as a secure communications app because the messages are end-to-end encrypted and can therefore not be intercepted by a third party.”
According to a report, a voice call made to a victim could disappear from the call log.
The NSO group developed a powerful malware in January designed to spy on its users but has denied any engagements with the recent attack, stating its only duty as fighting crime and terror.
“The company does not operate the system, and after a rigorous licensing and vetting process, intelligence and law enforcement determine how to use the technology to support their public safety missions. We investigate any credible allegations of misuse, and if necessary, we take action, including, including shutting down the system. Under no circumstances would NSO be involved in the operating or identifying or targets of its technology, which is solely operated by intelligence and law enforcement agencies,” the group defended.
The New York Times reported that the malware must have targeted a London-based human rights lawyer, who is involved in a lawsuit against the NSO group. Amnesty International said that the attack is one feared by human rights groups because these tools are used by attackers to keep prominent journalists and activists under surveillance.
WhatsApp says an investigation is still ongoing, so the members in charge are unable to determine how many users were affected, its duration in the app, if the attack went beyond the confines of WhatsApp such as accessing photos and email, and if an update can eliminate any malware.
All those are still under probe, according to WhatsApp.
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
