WhatsApp can Now Avoid Spyware Compromise, Previously Possible through a Single Missed Phone Call

A WhatsApp NSO Pegasus spyware vulnerability allowed hackers to compromise users’ hardware and collect personal information…

Facebook discovered a vulnerability in its subsidiary messaging app, WhatsApp, which allowed bad actors to inject commercial-grade spyware on users’ devices, just by a single phone call.

Facebook Reveals WhatsApp Users Suffered Clandestine Attacks through NSO Pegasus Spyware Vulnerability

The news comes after a report by The Financial Times revealed the attack targeted both Android and iOS devices, alike.

It comes through a technology, developed by the secretive Israeli NSO group, which is used by governments and law enforcement. 

Once installed, with just a single call, even a missed call, it can activate a phone’s camera and microphone. It can also scan email, text messages, and retrieve location data.

WhatsApp is actively urging its 1.5 billion worldwide users to upgrade their apps immediately to avoid the threat:

“WhatsApp encourages people to upgrade to the latest version of our app, as well as keep their mobile operating system up to date, to protect against potential targeted exploits designed to compromise information stored on mobile devices.”

The vulnerability exists in the following versions of WhatsApp:

  • WhatsApp for Android prior to v2.19.134
  • WhatsApp Business for Android prior to v2.19.44
  • WhatsApp for iOS prior to v2.19.51
  • WhatsApp Business for iOS prior to v2.19.51
  • WhatsApp for Windows Phone prior to v2.18.348
  • WhatsApp for Tizen prior to v2.18.15

Ashley Lipman

Ashley Lipman is a super-connector with Outreachmama who helps businesses find their audience online through outreach, partnerships, and networking.