Spyware discovered targeting phones through WhatsApp calls | News

Spyware crafted by an “advanced cyber actor” infected multiple targeted mobile phones through the WhatsApp messaging service without any user intervention through in-app voice calls.

The malware was able to penetrate phones through missed calls alone via the application’s voice calling function, a spokesperson for the Facebook subsidiary said on Monday.

An unknown number of mobile phones were infected by the malware, which the company said it discovered in early May, according to the spokesperson.

The Financial Times identified the “actor” as Israel-based NSO Group, which makes products for Middle Eastern and Western intelligence agencies. A WhatsApp spokesperson later said, “We’re certainly not refuting any of the coverage you’ve seen.”

The spokesperson did not mention NSO in a statement on the flaw but said the attack had “all the hallmarks of a private company that has been known to work with governments to deliver spyware that has the ability to take over mobile phone operating systems”.

WhatsApp, which has more than 1.5 billion users, said it contacted Citizen Lab and human rights groups, quickly fixed the issue and pushed out a patch.

The flaw was discovered while “our team was putting some additional security enhancements to our voice calls” and engineers found that people targeted “might get one or two calls from a number that is not familiar to them. In the process of calling, this code gets shipped”.

‘Scary vulnerability’

The attack targeted iPhones, as well as phones with Google’s Android system, Microsoft Windows phones and Samsung’s Tizen system.

John Scott-Railton, a researcher with the internet watchdog Citizen Lab, called the hack “a very scary vulnerability”.

”There’s nothing a user could have done here, short of not having the app,” he told the Associated Press news agency.

Spokespeople for NSO Group did not immediately respond to an email from the AP seeking comment.

NSO says its products enable government intelligence and law enforcement agencies to investigate and prevent terrorism and crime.

The revelation adds to the questions over the reach of the Israeli company’s powerful spyware, which can hijack mobile phones, control their cameras and effectively turn them into pocket-sized surveillance devices.

NSO’s spyware has repeatedly been found deployed to hack journalists, lawyers, human rights defenders and dissidents.

According to a New York Times report last year, the United Arab Emirates had asked NSO to hack into the phones of the Qatari emir and a Saudi prince among other political and regional rivals. 

The spyware was also implicated in the gruesome killing of journalist Jamal Khashoggi, who was dismembered in the Saudi consulate in Istanbul last year. His body could not be found.

Several alleged targets of the spyware, including a close friend of Khashoggi and several Mexican civil society figures, are currently suing NSO in an Israeli court over the hacking.

Source

more recommended stories

  • Trump says US warship ‘destroyed’ Iranian drone in Gulf | Iran News

    The United States says a US Navy ship.

  • Trump’s racism and American exceptionalism | USA

    The uproar over US President Donald.

  • Iran seizes foreign oil tanker for ‘smuggling oil’, crew arrested | Iran News

    Iran‘s Revolutionary Guard Corps have seized.

  • Crowd chants ‘send her back’ as Trump renews attacks on Omar | USA News

    US President Donald Trump has intensified.

  • ‘Wizard’ arrested after hack of most Bulgarian taxpayers’ details | News

    A 20-year-old Bulgarian cybersecurity worker was.

  • US slaps sanctions on Myanmar army chief over Rohingya abuses | News

    The United States has announced sanctions.

  • Religious restrictions on the rise globally: report | News

    Religious restrictions are on the rise.

  • Iran hits back at US demands on ballistic missiles, proxy groups | News

    Iran has hit back at US.

  • Malaysia parliament to debate move to lower voting age to 18 | News

    Kuala Lumpur, Malaysia – Malaysia’s parliament.

  • El Salvador rape victim jailed for stillbirth goes on trial again | El Salvador News

    San Salvador, El Salvador – Evelyn.

  • Powerful earthquake rocks parts of eastern Indonesia | News

    A strong, shallow earthquake has struck.

  • Cricket: England beat New Zealand to win World Cup | News

    World Cup winners 1975 – West.

  • Barry weakens but Louisiana authorities warn threat remains | News

    Slow-moving tropical storm Barry has weakened.

  • Why is Turkey’s purchase of Russian weapons controversial? | USA

    A battle appears to be looming.

  • UK police warning to media over leaked memos stirs anger | News

    Senior British politicians, including both contenders.

  • The informal networks resisting Honduras’s abortion ban | Honduras

    Tegucigalpa, Honduras – At 22 years.

  • Suicide attack at Somalia hotel followed by gunfire | Somalia News

    A car bomb went off in.

  • Sudan’s ruling military council says coup attempt foiled | News

    Sudan‘s ruling military council (TMC) says.

  • Ghana’s president wants Africa-Europe relationship to change | Colonialism News

    Africa must change its relationship with.

  • Ex-UN chief joins chorus of concern over floods at Rohingya camps | News

    Former UN Secretary-General Ban Ki-moon has.

  • US wants Senate-approved deal with Iran: US envoy Brian Hook | News

    The Trump administration wants a Senate-approved agreement.

  • After ISIL, children try to catch up with school in Mosul | ISIS/ISIL News

    Mosul, Iraq – It was the.

  • US wants military coalition to safeguard waters off Iran, Yemen | Iran News

    The United States says it is.

  • Israel’s separation wall endures, 15 years after ICJ ruling | News

    In the occupied West Bank, the.

  • Turkey seeks to arrest hundreds over alleged Gulen links | News

    Turkish prosecutors have ordered the arrest.

  • Iran: World powers won’t get a better nuclear deal | USA News

    Iran warned world powers they will.

  • Iran passes new nuclear deal limit as China blames US for crisis | News

    Iran has passed the uranium enrichment cap.

  • Trump hits back at UK envoy who called White House ‘inept’ | Trump News

    US President Donald Trump has hit back.

  • Indonesia: Tsunami warning issued after strong earthquake | News

    Indonesian authorities have issued a tsunami.

  • Anti-racists outnumber far-right Proud Boys at DC rally | USA News

    Washington, DC – Counterprotesters outnumbered members.

  • How can modern slavery be stopped? | UK

    They were told they’d get jobs.

  • Media haven or hell? The paradox of journalism in Turkey | Turkey

    In this special edition of the.