A security firm has found a series of flaws in WhatsApp that could allow hackers to intercept and manipulate messages by changing the identity of a sender or altering their text.
Attackers could literally "put words in [someone's] mouth," security firm Check Point Research wrote in a press release on Wednesday.
This gives the attackers the power to "create and spread misinformation from what appear to be trusted sources," Check Point said.
Facebook, which owns WhatsApp, did not immediately respond to a request for comment.
Visit Business Insider's homepage for more stories.
A cybersecurity firm has discovered a flaw in WhatsApp that allows hackers to intercept and manipulate messages — potentially changing the identity of a message sender or altering their text.
A WhatsApp security vulnerability could allow someone to intercept or manipulate your personal messages to make it look like you said something you didn’t.
A 2018 report from Check Point Research found three vulnerabilities within the popular Facebook-owned app.
Check Point found that an attacker could:
Use the ‘quote’ feature in a group conversation to change the identity of the sender, even if that person is not a member of the group.
Alter the text of someone else’s reply, essentially putting words in their mouth.
Send a private message to another group participant that is disguised as a public message for all, so when the targeted individual responds, it is visible to everyone in the conversation.”
This the reason hackers have targeted it and created an adware to fool the users to download unwanted web browsers extension.
While you surf the net and suddenly see a URL alluring you to download a new version of WhatsApp having new colors you need to be aware.
The user will find a URL asking you to click on it to update your WhatsApp with new colors.
then it will redirect you to the fake website of WhatsApp which seems like the official one.
Most of the users didn’t realize that it isn’t the official website of the WhatsApp and click on the install.
Then it will ask you to follow the further steps.
