WhatsApp had a large security hole that allowed spyware to be installed with one call
Corrected an important security breach in WhatsApp that, through a simple phone call, allowed the installation of a spyware tool.
Big tech companies seem to be losing interest in offering security to users. Intel, AMD and ARM have all been affected by Specter and Meltdown. Also to top it off, different vulnerabilities have been detected for Intel processors. The security of the different software that we use daily is not the most optimal either. Facebook without going any further is a complete and constant drain and it is that since the problem of Cambridge Analytica problems have not stopped arising. Now it has been discovered that WhatsApp had a serious security problem present for a long time.
WhatsApp had a serious security problem
Facebook in a statement published earlier this month has recognized a security breach in WhatsApp. This security breach is the most serious discovered in the application to date. This security problem allows the attacker to install a spyware tool on the terminal by simply making a call. The worst thing is that it is unknown how long this security hole has been active.
You don't need advanced hacking techniques or anything like that, one call was more than enough. It was that simple to hack an Android smartphone and install malicious software on the terminal without our knowing it. This is due, among others, to the fact that WhatsApp has full access to the storage of our terminal. A permission, on the other hand, that we must give yes or yes to be able to execute the application.
Security hole exploited by James Bond
According to the social network, there would be very few cases of spyware injection through this security hole. They indicate that the few cases that exist would have their origin in espionage agencies of different governments. As indicated, the Pegasus tool is used to exploit the vulnerability. A software that would have been developed by various intelligence agencies, including the CIA.
The statement from the social network also indicates that it would have taken at least ten days to have a security patch ready. A significant amount of time to fix a fairly serious security hole. But the most serious thing is that it is unknown how long this problem has been active without anyone detecting it.
Source: TechCrunch