[Update 1: WhatsApp sues Israeli firm] WhatsApp vulnerability allowed installation of spyware on smartphones

-

Update 1 (10/31/19 @ 05:20 AM ET): WhatsApp has notified 1,400 users who were potentially affected by the spyware and has sued the Israeli firm, NSO Group in a U.S. District Court.

The original article from May 14, 2019, continues below.

Facebook has had a tough time since the revelations of Cambridge Analytica data harvesting case came out last year. At the F8 conference this year, the chief executive Mark Zuckerberg promised to execute a “re-plumbing” job to make Facebook and its sister platforms – including WhatsApp and Instagram – more private and secure. But, it looks like the company’s problems, as well as its users’, might not be ending anytime soon. In a shocking revelation, we have learned that a vulnerability in the WhatsApp messenger may have allowed hackers to install spyware on users’ smartphones to snoop on so-called end-to-end encrypted chats.

Financial Times (paywall) reports that a vulnerability in WhatsApp voice calling feature allowed attackers to remotely execute a code that would install spyware on any iPhone or Android smartphone. This could be accomplished even if the targets did not pick up the call. A WhatsApp spokesperson said that the security team has patched the issue but insists users update their apps at the soonest possible.

The publication alleges although the creator of this exploit is unclear, it resembles other products by Israeli company NSO Group, which has been previously accused of providing spyware to wiretap the conversations of human right activist and journalists. NSO Group is infamous as the creator of a powerful tool called Pegasus, which can be used by intelligence agencies worldwide to eavesdrop on suspects. It was also alleged to have helped the Saudi government track the conversations of opposers of the autocratic regime and dissidents and the list of targets includes the slain Wall Street Journal reporter Jamal Khashoggi. The company claims that its products are sold to government agencies for fighting against terrorism and is been facing multiple lawsuits on grounds of illegal hacking.

Earlier this month, when WhatsApp’s engineers were trying to fix the vulnerability, the came across unusual voice calling activity, which is when they grew wary of the gravity of this situation. This was reportedly an attack used to target a London-based human rights lawyer involved in lawsuits against NSO Group. The lawyer, whose name was not shared, was representing individuals including a bunch of activists, journalists, and dissidents whose smartphones have previously been sabotaged by NSO’s Pegasus.

Besides releasing a fix for the vulnerability on Monday, WhatsApp also alerted the U.S. Justice Department about the possibility that similar tools could be in use for targeting users in the country.

Via: Ars Technica

Update: WhatsApp sues NSO Group

In a blog post, WhatsApp noted that it has informed approximately 1,400 through a “personal message.” The Facebook-owned messaging giant has also sued the Israeli start-up NSO Group in a U.S. District Court for selling commercial spyware to governments and law enforcement agencies.

WhatsApp said in the blog post, “We believe this attack targeted at least 100 members of civil society, which is an unmistakable pattern of abuse. This number may grow higher as more victims come forward.”

NSO Group refuted these claims and told the BBC, “In the strongest possible terms, we dispute today’s allegations and will vigorously fight them.”

WhatsApp Messenger (Free, Google Play) →

The post [Update 1: WhatsApp sues Israeli firm] WhatsApp vulnerability allowed installation of spyware on smartphones appeared first on xda-developers.



Comments

Post a Comment

Popular posts from this blog

Honor 20 Pro is Now Available in 14 Countries

-
Image
The Honor 20 was off to a really rocky start with the controversial U.S.A. ban on HUAWEI. While the future of the phone was initially unclear, the planned launch of the phone is now in full swing. As this phone’s complicated launch slowly starts to be available around the world, here are all the places where you can get an Honor 20 Pro.   Country Availability Date Selling Channel Russia 2019/8/2 DNS . MTS, GB 2019/8/1 Amazon.uk , CPW , o2, H3G France 2019/8/22 Amazon, Boulanger, Cdiscount, Darty, FREE, Fnac. Orange, SFR. Offline [HONOR Shop Paris & Lyon] German 2019/7/21 MSD, 1&1 mobile, Amazon , Mediamarket/ phonehouse Netherlands 2019/7/31 bol.com , Belsimpel Czechia 2019/8/15 Alza Finland 2019/8/13 ELsia DNa Poland 2019/8/8 RTV EURO AGD , X-Kom Malaysia 2019/8/15 HiHonor , Shopee . Offline [all HONOR stores in Malaysia] Saudi Arabia 2019/7/31 Pre-sell 2019/8/6 First day sale HiHonor Egypt 2019/7/29 Pre-s...
Read more

Motorola’s foldable Razr phone may be announced before year’s end

-
While Samsung’s saga with the Galaxy Fold appears to finally be coming to an end , there are other foldables destined to be released soon. The Huawei Mate X is the other big name, but it has been delayed a couple of times as well. The other foldable device that we’ve heard about a few times is the rumored Motorola Razr reboot, and a new report claims an announcement is coming this year still. Earlier this year, reports suggested Motorola would launch its foldable phone this summer. That time has come and gone without a peep from Motorola, but a new report claims it’s still coming this year. This information comes from a person close to the company speaking to CNET . It’s unlikely that the device will actually be sold this year, but we should at least see the device before 2020. Motorola has already confirmed that they are working on a foldable smartphone. The “Razr” name was also confirmed by a Bluetooth certification. We exclusively reported on the specifications of the device ,...
Read more

Behind Dynamic System Updates in Android Q: How Google is using Project Treble to improve future Android releases

-
Image
Alongside the release of Android 8.0 Oreo, Google unveiled Project Treble : a major rearchitecting in the way the Android OS framework and the vendor HALs and Linux kernel communicate. Treble is a major initiative designed to reduce Android platform version and security patch fragmentation , and all Android-branded devices launching with Android Pie are required to support Project Treble. OEMs and vendors test Treble compatibility by booting a Generic System Image (GSI)—a pure stock build of Android from AOSP—and passing the Vendor Test Suite (VTS) and Compatibility Test Suite-on-Generic System Image (CTS-on-GSI). The GSI has proven useful in not only allowing software engineers working for OEMs test Treble compatibility, but it has also opened the door for a large custom ROM community on XDA. For the Android Q release, Google wants to make GSIs useful for another group: app developers. Since the first stable release and source code drop of any given Android platform release usual...
Read more