Users of WhatsApp even without receiving a call can still have malicious code installed on their device. Photo: MyBroadband.
Details of the vulnerability are still kept private, but WhatsApp said it has received information about the attack since early May.
WhatsApp representative said, there are signs that this is an attack by a private company cooperating with the government in providing spyware that exploits phone features.
An update to patch this vulnerability has been released, users need to update whether or not they receive a suspicious call to prevent being exploited with information stored on the device.
The Financial Times (FT) said that the tracking software was developed by NSO Group, of Israel, which is believed to have released Pegasus malware in 2018. However, NSO did not give any comment. any argument about the allegations.
It is not yet known how many phones are installed with tracking software through this attack, but WhatsApp acknowledges that both Android, iOS and Windows Phone smartphones are affected.