WhatsApp vulnerability allowed hackers to install spyware on users' phones

WhatsApp is pushing an update after disclosing a vulnerability that exposed users to hackers.

The app's calling function was used by hackers to install spyware on the phones of a number of users believed to be in the dozens at least, CBS News reports. Affected users would receive a call or two from an unknown number, and even if they didn't pick it up, this was enough for the spyware to be installed, NBC News reports.

The Financial Times first reported on the story and pointed to the Israeli firm NSO Group, which previously developed software reportedly used to spy on journalist Jamal Khashoggi, as being behind the spyware. WhatsApp did not specifically identify NSO Group but said the hackers had "all the hallmarks of a private company that works with a number of governments around the world." A spokesperson for WhatsApp also told The Associated Press, "We're certainly not refuting any of the coverage you've seen."

The Week

Escape your echo chamber. Get the facts behind the news, plus analysis from multiple perspectives.

SUBSCRIBE & SAVE

Sign up for The Week's Free Newsletters

From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.

From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.

Sign up

NSO Group said in a statement its technology would not be used "in its own right to target any person or organization."

WhatsApp, which is owned by Facebook, says it shared information with law enforcement and fixed the vulnerability on Sunday, but it's still encouraging all of its more than 1.5 billion users to update to the latest version. An expert with the watchdog group Citizen Lab told NBC this was a "very scary vulnerability," especially because "there's nothing a user could have done here, short of not having the app."