WhatsApp users are being urged to update their app immediately thanks to a security flaw that allowed hackers to remotely hijack smartphones through the software鈥檚 voice calling function.
According to security researchers, hackers were able to plant the spyware on dozens of smartphones around the world by repeatedly calling the victim on the app. Once installed, hackers were able to access the victim鈥檚 smartphone data, and activate their camera and microphone remotely.
Who is affected?
Here鈥檚 the good news: although the security flaw is found across all older versions of WhatsApp, experts say the general public is not the main target of this attack.
The spyware was reportedly developed by Israeli cyber intelligence firm NSO Group. The cyber intelligence firm鈥檚 malicious software been used to target journalists, human rights defenders and lawyers.
鈥淲hat the NSO Group and companies like that do is focus their efforts on the most popular pieces of software and try to identify vulnerabilities that they can sell; that they can weaponize,鈥� cybersecurity expert Claudiu Popa told CTV News Channel.
鈥淭his is a very targeted use too鈥攊n other words, the public at large does not need to fear this, but it certainly is a concern from an activism perspective.鈥�
How can you protect yourself?
That said, all 1.5 billion WhatsApp users worldwide are being advised to update their app as soon as possible to protect themselves in the event that the spyware becomes more widespread.
Facebook, which owns WhatsApp, issued a patch to correct the issue Tuesday. That means all you have to do to protect yourself is update your app to the most recent version available.
On iPhone:
- Open the App Store and tap 鈥淯pdates鈥�
- Find 鈥淲hatsApp鈥� on the list and tap 鈥淯pdate鈥�
On Android:
- Open the Play Store and tap the three lines in the upper left corner
- Select 鈥淢y Apps & Games鈥� from the menu
- Select 鈥淲hatsApp鈥� and tap 鈥淯pdate鈥�
Security experts also recommend enabling automatic updates on your device to ensure you receive the latest security patches for all apps once they are made available.
