WhatsApp urges users to upgrade app after discovering spyware vulnerability

[muriel_volestrangler]

Source: The Guardian

WhatsApp is encouraging users to update to the latest version of the app after discovering a vulnerability that allowed spyware to be injected into a user’s phone through the app’s phone call function.
...
The vulnerability was used in an attempted attack on the phone of a UK-based attorney on 12 May, the FT reported. The lawyer, who was not identified by name, is involved in a lawsuit against NSO brought by a group of Mexican journalists, government critics and a Saudi Arabian dissident.

“The attack has all the hallmarks of a private company reportedly that works with governments to deliver spyware that takes over the functions of mobile phone operating systems,” WhatsApp said in a statement. “We have briefed a number of human rights organizations to share the information we can and to work with them to notify civil society.”
...
NSO limits sales of its spyware, Pegasus, to state intelligence agencies. The spyware’s capabilities are near absolute. Once installed on a phone, the software can extract all of the data that’s already on the device (text messages, contacts, GPS location, email, browser history, etc) in addition to creating new data by using the phone’s microphone and camera to record the user’s surroundings and ambient sounds, according to a 2016 report by the New York Times.

Read more: https://www.theguardian.com/technology/2019/may/13/whatsapp-urges-users-to-upgrade-after-discovering-spyware-vulnerability

---

Used against human rights organisations. With the involvement of a government. They may limit the sales to governments, but some of the governments in the world are murderous. eg the Saudis.

[Maine-i-acs]

1. "Russia if you're listening ..."

Ah nevermind.
Enjoy reading Jared's history

[Hortensis]

2. Oh, goody. I'm just going to delete mine.

The friends we really needed it for are back in the states.

Gone. Thanks, Muriel.

[Fiendish Thingy]

3. When is Jared's subpoena being issued?

Seems like the intelligence committee might have a few questions about his use of What’sApp...

[Eugene]

4. WhatsApp spyware attack was attempt to hack human rights data, says lawyer

Source: The Guardian

WhatsApp spyware attack was attempt to hack human rights data, says lawyer

NSO Group technology reportedly used against lawyer involved in civil case against the Israeli surveillance firm

Nick Hopkins and Dan Sabbagh
Tue 14 May 2019 13.27 BST Last modified on Tue 14 May 2019 21.56 BST

The UK lawyer whose phone was targeted by spyware that exploits a WhatsApp vulnerability said it appeared to be a desperate attempt by someone to covertly find out the details of his human rights work.

The lawyer, who asked not to be named, is involved in a civil case brought against the Israeli surveillance company NSO Group whose sophisticated Pegasus malware has reportedly been used against Mexican journalists, and a prominent Saudi dissident living in Canada.

It has been claimed the would-be hacker had also repeatedly attempted to install Pegasus on the lawyer’s phone in recent weeks.

The lawyer, speaking to the Guardian, said he did not know who was behind the attempt to spy on him.

-snip-

Read more: https://www.theguardian.com/technology/2019/may/14/whatsapp-spyware-vulnerability-targeted-lawyer-says-attempt-was-desperate