Never miss a story

Get subscribed to our newsletter


×
WhatsApp has also released a new beta that brings in a number of tweaks, including a fix for a serious Bug that caused the last version of WhatsApp beta for Android to crash for many users. Pixabay

Security researchers on Tuesday said they have detected a serious vulnerable Bug in WhatsApp that led to group chat crash the moment a destructive message was introduced by the hackers in the chat, leading the entire group chat history being deleted forever.

Urging all users to update WhatsApp to the latest version, security researchers at global cybersecurity firm Check Point identified the flaw that would allow a bad actor to create a malicious group message to crash Facebook-owned WhatsApp on users’ devices.


Since there was no remedy, all members of the group were forced to uninstall and reinstall WhatsApp in order to regain full use. The group chat could not be restored after the crash occurred.

The bug has now been fixed. The company issued a fix to resolve the issue which is available since WhatsApp version number 2.19.58.

“Because WhatsApp is one of the world’s leading communication channels for consumers, businesses and government agencies, the ability to stop people using WhatsApp and delete valuable information from group chats is a powerful weapon for bad actors,” said Oded Vanunu, Check Point’s Head of Product Vulnerability Research.

“All WhatsApp users should update to the latest version of the app to protect themselves against this possible attack,” Vanunu added.

On an average, 65 billion messages are sent on WhatsApp per day by over 1.5 Billion users globally.


Security researchers on Tuesday said they have detected a serious vulnerable Bug in WhatsApp that led to group chat crash the moment a destructive message was introduced by the hackers in the chat, leading the entire group chat history being deleted forever. Pixabay

This is how it works.

To create the malicious message that would impact a WhatsApp group, the bad actor would need to be a member of the target group (WhatsApp allows up to 256 users per group).

From there, the bad actor would need to use WhatsApp Web and their web browser’s debugging tool to edit specific message parameters and send the edited text to the group.

This edited message would cause a crash loop for group members, denying users access to all WhatsApp functions until they reinstall WhatsApp and delete the group with the malicious message.

Check Point Research disclosed its findings to the WhatsApp bug bounty programme in August this year. WhatsApp acknowledged the findings and developed a fix to resolve the issue which users should manually apply on their devices.

“WhatsApp responded quickly and responsibly to deploy the mitigation against exploitation of this vulnerability,” said Vanunu.

The Check Point Research team found the vulnerability by inspecting the communications between WhatsApp and WhatsApp Web, the web version of the app which mirrors all messages sent and received from the user’s phone.

This enabled researchers to see the parameters used for WhatsApp communications and manipulate them.


All WhatsApp users should update to the latest version of the app to protect themselves against this possible Bug attack. Pixabay

The new research builds on the ‘FakesApp’ flaws discovered by Check Point Research, which allowed group chat messages to be edited to spread fake news.

ALSO READ: Samsung Launches Latest Fabrication Technology for Smartphone Cameras

WhatsApp has also released a new beta that brings in a number of tweaks, including a fix for a serious bug that caused the last version of WhatsApp beta for Android to crash for many users. (IANS)


Popular

VOA

This image released by Disney Theatrical Productions shows, from second left, Michael James Scott as Genie, Michael Maliakel as Aladdin, and Shoba Narayan as Jasmine after a performance of the Broadway musical "Aladdin" in New York on Sept. 28, 2021

As kids growing up in different states, Shoba Narayan and Michael Maliakel shared a love of one favorite film — "Aladdin." Both are of Indian descent, and in the animated movie, they saw people who looked like them.

That shared love has gone full-circle this month as Narayan and Maliakel lead the Broadway company of the musical "Aladdin" out of the pandemic, playing Princess Jasmine and the hero from the title, respectively.

Keep Reading Show less
VOA

Bottles of Jack Daniel's whiskeys are displayed at Rossi's Deli in San Francisco

Jack Daniel's is the world's most popular whiskey brand, but until recently, few people knew the liquor was created by Nathan "Nearest" Green, an enslaved Black man who mentored Daniel.

"We've always known," says Debbie Staples, a great-great-granddaughter of Green's who heard the story from her grandmother. … "He made the whiskey, and he taught Jack Daniel. And people didn't believe it … it's hurtful. I don't know if it was because he was a Black man."

Keep Reading Show less
Photo by Aksh yadav on Unsplash

Cricket fans can now book the ultimate experience with the official accommodation booking partner for the ICC Men's T20 World Cup

Cricket fans can now book the ultimate experience with the official accommodation booking partner for the ICC Men's T20 World Cup, Booking.com. The T20 Pavillion, a bespoke cricket-themed luxury stay that transforms the Presidential Suite at Grand Hyatt Mumbai Hotel and Residences into a classic cricket stadium.


The suite offers guests an all-inclusive once-in-a-lifetime experience during the India vs Pakistan ICC Men's T20 World Cup match on October 24, 2021, packed with quirks and luxuries that is sure to satisfy even the biggest cricket enthusiast. Additionally, as a part of the experience, guests will also have the exclusive opportunity to meet Bollywood actor Shraddha Kapoor at The T20 Pavilion.

Keep reading... Show less