My desktop WhatsApp on macOS is crashing pretty regularly, once every few days. Really makes me wonder if I'm being targeted using similar exploits.
WhatsApp voice calls were used to inject spyware on phones
181–190 of 313 posts
Re: WhatsApp voice calls were used to inject spyware on phones
#182Earlier quoted context omitted.
It's just my unsubstantial opinion. Too many players raising too much money in a consolidated market. Bar some notable exceptions (NSO), this herd of misguided lemmings has one way out - acquisition by Checkpoint/Imperva/SalesForce. But maybe I'm wrong and we'll see 100 Mobileyes in the coming decade.
Oh, in case you meant infosec in particular, you might be right, I don't really know much about this industry.
Yes the numbers given above are just for the cyber sector.
Re: WhatsApp voice calls were used to inject spyware on phones
#183What about Wechat? There are lots of seemingly pretty girls trying to voice or video call these days. Either I'm suddenly rich in their eyes or there's something fishy going on.
Re: WhatsApp voice calls were used to inject spyware on phones
#184Earlier quoted context omitted.
Just updated via UK iOS app store and its 2.19.50
You're still vulnerable then. "Affected versions: ... WhatsApp for iOS prior to v2.19.51" from https://www.facebook.com/security/advisories/cve-2019-3568 The news outlets are all telling us to update, but until WhatsApp/Apple get their act together, there's no point. Worse still, people won't realise they need to do it again and will remain vulnerable indefinitely.
I'm on Android. It auto-updated on May 10th to v2.19.134
"The issue affects WhatsApp for Android prior to v2.19.134"
Re: WhatsApp voice calls were used to inject spyware on phones
#185"update the app" is the sum of the advice? how about telling us how to check if this exploit was used, how to remove the spyware, etc?
I'm not sure what can be done nowadays. In the past you would say, format disks and go back to a backup before the threatening event happened. But nowadays all our stuff is in the cloud and you can only go back to the state from 10 minutes ago, and all our disks are flash drives that you can't fully format as an end user. Maybe you can just accept that some virusses will always be there and act accordingly.
Re: WhatsApp voice calls were used to inject spyware on phones
#186My desktop WhatsApp on macOS is crashing pretty regularly, once every few days. Really makes me wonder if I'm being targeted using similar exploits.
It's probably the link preview preload. It can't handle certain sites and crashes almost instantly when trying to send a link.
Re: WhatsApp voice calls were used to inject spyware on phones
#187It seems to me that if this is possible an OS software upgrade of some sort is urgently required, in addition to possible updates of WhatsApp. How come there isn’t coverage of this as Android and iOS vulnerabilities?
Gaining control of WhatsApp gains access to any API accessible to WhatsApp. Incompetent reporting may be at fault. On Android, WhatsApp seeks a wide array of permission-controlled APIs. It does so on iOS as well. Once granted, the app has access to any data available through access-allowed APIs. App code goes through an audit process to ensure that the app isn’t using accessible APIs inappropriately, and doesn’t perm…
Do you happen to know if upgrading the app would remove persistence (inside the app)?
Re: WhatsApp voice calls were used to inject spyware on phones
#188Re: WhatsApp voice calls were used to inject spyware on phones
#189Just to be clear – does this affect iPhone, or just Android?
Re: WhatsApp voice calls were used to inject spyware on phones
#190Why was the word "Israeli" removed from the title?
I took it out because the thread was veering into generic flamewar about Israel. Actually we often remove country names from titles because they trigger people into making more nationalistic comments, which are equal parts indignant and boring.
That's a bit of a pathetic policy if you ask me. In my opinion a country who permits this type of behaviour shouldn't be shielded from the ensuing negative press. If anything it might encourage otherwise unaware citizens to put pressure on the government to do something about it.