WhatsApp: a missed call could install spyware
A WhatsApp bug let attackers install spyware just by calling, even if nobody answered. Update now.
WhatsApp confirmed yesterday a bug in its calling feature (CVE-2019-3568). Attackers could install spyware on a phone just by calling it. The call didn’t need to be answered, and it could disappear from the call log. WhatsApp says it was used against a small number of targets by an advanced attacker.
The fix is already out. What to do:
- Update WhatsApp on Android and iPhone today, and the phone’s operating system too.
- Turn on automatic app updates so the next fix arrives without you thinking about it.
- If you’re in a high-risk role (journalist, lawyer, activist, executive), consider getting your phone checked by a specialist.
“Don’t click strange links” doesn’t help when no click is needed. Fast updates are the only defence for most of us.