2019 WhatsApp security advisory for pet professionals
In May 2019, Spain's National Cybersecurity Institute (INCIBE) published an advisory about a WhatsApp security flaw affecting several operating systems. This article preserves the information shared at the time.
Affected versions
The advisory applied to employees, freelancers and businesses using these versions of WhatsApp:
- WhatsApp for Android, before v2.19.134
- WhatsApp Business for Android, before v2.19.44
- WhatsApp for iOS, before v2.19.51
- WhatsApp Business for iOS, before v2.19.51
- WhatsApp for Windows Phone, before v2.18.348
- WhatsApp for Tizen, before v2.18.15
What happened?
Facebook, which owned WhatsApp at the time, confirmed a vulnerability in the versions listed above. According to the advisory, it could allow an attacker to steal confidential information, among other malicious actions.
Advice given at the time
Update WhatsApp through the official app store. WhatsApp also encouraged users to keep their phone's operating system up to date to help protect information stored on the device.
The advisory also recommended general security habits for pet businesses:
- Keep mobile apps and operating systems up to date.
- Download apps only from official stores.
- Be careful with links and attachments in emails, text messages, WhatsApp messages and social media, even if they appear to come from someone you know.
- Help employees recognize common cybersecurity threats.
Further details
The advisory described an attack that exploited WhatsApp's voice calling feature to install malware on affected devices. It also reported that the malware could remove traces of the calls, making the attack harder to detect.
Did you find it interesting?
If you have any questions, you want to propose that we write a help guide or a post on a topic or you just want to chat with us, don't hesitate. We are delighted to talk with you and get your opinion.
