WhatsApp Confirms a New Threat; Android And iOS Users at Risk From Malicious Video Files

“}var y='”;$(“#main_score_strip_top”).html(y),set_score_slider_style()}else $(“#top_strip_cricket_widget”).html(“”),”undefined”!=typeof updateTopScoreWidgetNews18&&clearInterval(updateTopScoreWidgetNews18),console.log(“no live match in progress”)},error:function(e){console.log(“error in live score widget”),$(“#top_strip_cricket_widget”).html(“”)}})} function get_live_team_scores(e,s,i){var e=get_ipl_teams_short(e),t=s,i=i,a=”https://images.news18.com/static_news18/ibnlive/pix/ibnhome/cricketnext/microsite/teamsicon/”,r=a+e.toLowerCase()+”.png”,n=’'+e+' ‘,c=t.length;if(c>0){for(var o=1,v=””,l=0;c>l;l++){var m=t[l].scores,p=t[l].wickets,f=t[l].overs,g=t[l].active;if(1==g)var d=”“,_=”“;else d=””,_=””;if(2==o)var b=” & “;else var b=””;”test”==i?(v=v+” “+b+d+m+”/”+p+_,o+=1):(v=v+” “+d+m+”/”+p+”(“+f+”)”+_+b,o+=1)}var h=d+e+_;h=’

‘+n+h+v+”

“}else h=’

‘+n+e+’ (YET TO BAT)

‘;return h} function convertToSlug(e){return e.replace(” (W)”,””).replace(” (C)”,””).toLowerCase().replace(/[^\w ]+/g,””).replace(/ +/g,”-“)} function get_ipl_teams_short(a){var r=new Array;return r.Kolkata=”KKR”,r.KOL=”KKR”,r.MUM=”MI”,r.Mumbai=”MI”,r.HYD=”SRH”,r.Hyderabad=”SRH”,r.PUN=”RPS”,r.Punjab=”KXIP”,r.PNJ=”KXIP”,r.Bangalore=”RCB”,r.BLR=”RCB”,r.Delhi=”DD”,r.DEL=”DD”,r.Pune=”RPS”,r.Gujarat=”GL”,r.GUJ=”GL”,r.TBC=”TBC”,a in r?r[a]:a} var updateTopScoreWidgetNews18=setInterval(function(){news18_top_widget_live_scores() }, 20000);});<!–

–><!–
googletag.cmd.push(function() {googletag.defineSlot(‘/1039154/News18/News18_ImpressionTracker/News18_ImpressionTracker_RelianceDigital’, [1, 1], ‘div-gpt-ad-1520512791547-0’).addService(googletag.pubads());googletag.pubads().enableSingleRequest();googletag.enableServices();});

googletag.cmd.push(function() { googletag.display(‘div-gpt-ad-1520512791547-0’); });

–>

A potential hacker can trigger this to take control of your phone by sending you an infected video file, in the MP4 format.

WhatsApp Confirms a New Threat; Android And iOS Users at Risk From Malicious Video Files

A potential hacker can trigger this to take control of your phone by sending you an infected video file, in the MP4 format.

The most popular instant messaging app in the world is not having a good time of it. We haven’t even gotten over the Pegasus spyware attack and its fallout, and the WhatsApp has confirmed that there is yet another vulnerability that allows hackers to take control of a user’s WhatsApp data and even the data on their phone. The best thing you can do right now to reduce the risk of your WhatsApp data getting compromised is to update the app on your Android phone or the Apple iPhone, from the Play Store or App Store respectively. Basically, a potential hacker can trigger this to take control of your phone by sending you an infected video file, in the MP4 format.

“A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Windows Phone versions before and including 2.18.368, Business for Android versions prior to 2.19.104, and Business for iOS versions prior to 2.19.100,” notes the advisory issued by Facebook regarding the latest WhatsApp vulnerability. A lot of users keep the auto-download option on for media files, and that just makes life easier for hackers.

Also Read | WhatsApp And Privacy: You Must Check Out These Settings on Your Phone

It is confirmed that WhatsApp for Android versions prior to 2.19.274, WhatsApp for iOS versions prior to 2.19.100, the Enterprise Client versions prior to 2.25.3, the Windows Phone versions before and including 2.18.368, the WhatsApp For Business for Android versions prior to 2.19.104, and WhatsApp For Business for iOS versions prior to 2.19.100 are affected.

There is precious little information beyond this, but from what we can understand, this is a serious one. A malware attack could result in a compromised phone, with the risk of malware being planted to either access data, do a remote takeover of your phone or computing device or even to eavesdrop on conversations. It really is as serious as things get. There is also no word on how this vulnerability was discovered.

WhatsApp recently confirmed a spyware was being used by Israel based company NSO Group to spy on government officials, journalists, activists, lawyers, and various countries globally, including India. The confirmation about the use of Pegasus spyware after WhatsApp sued NSO Group, which had long been suspected in the WhatsApp cyberattack that happened earlier this year. This came to light after WhatsApp sent out messages warning users in India that they had been the target of a spyware attack and the data on their phone and the instant messaging app could have been compromised.

Also Read | WhatsApp Gets One Step Closer to The Dark Mode; New Beta Gets Dark Wallpaper

Get the best of News18 delivered to your inbox – subscribe to News18 Daybreak. Follow News18.com on Twitter, Instagram, Facebook, Telegram, TikTok and on YouTube, and stay in the know with what’s happening in the world around you – in real time.

Read full article ‘; $(‘#first-watch-box’).html(response+titleHeading); } }, error: function(xhr, ajaxOptions, thrownError) { console.log(‘Something went wrong..’); } }); } var playWatchVideos = false; $(window).scroll(function() { var ividFirstScroll = $(‘.alsowatch’).offset().top – 100; var tagsScroll = $(‘.tag’).offset().top; var topOffsetIvid = $(window).scrollTop(); var topIviddistance = topOffsetIvid – ividFirstScroll; var finalScrollEnd = ividFirstScroll + 650; var holaPlayDivId = $(‘div.video-js’).attr(‘id’); var holaPlayerObj = videojs(holaPlayDivId); if(topOffsetIvid>ividFirstScroll && topOffsetIvidfinalScrollEnd && playWatchVideos==true) { holaPlayerObj.pause(); playWatchVideos=false; } });

Short URL: http://tinyurl.com/qtsoyfr