Latest News

Just a GIF: That’s all it took to hack your WhatsApp messages, files
Friday, October 4, 2019 IST
Just a GIF: That’s all it took to hack your WhatsApp messages, files

WhatsApp users may have been targeted by hackers through malicious GIFs. This bug let hackers gain access to user’s data on the app.

 
 

WhatsApp was recently affected with a double-free bug that allowed hackers to gain access to user data through malicious GIFs. WhatsApp has since patched the bug with the latest version of the app.
 
This bug was discovered by information security enthusiast ‘Awakened’ who posted the details on GitHub. According to the post, hackers could get inside someone’s phone by sending malicious GIF files to the user. The GIF file should however be sent as a document and not as a media file for the bug to work. Once the corrupted GIF is received, the bug is triggered through WhatsApp’s Gallery folder.
 
The researcher notes that just opening the WhatsApp Gallery to send images or videos is enough to trigger the bug. Even if the user doesn’t send any file the bug will still be activated giving hackers remote access. WhatsApp’s Gallery folder shows a preview of images, videos and GIFs received on the app. Since the media file including the malicious GIF is already downloaded and previewed, the bug will be triggered.
 
The researcher further explains that this bug works well on phones running Android 8.1 and Android 9 versions. In Android versions below Android 8.0 the bug can still work but it fails to register as the app will simply crash before completion of the hack.
 
Facebook after being informed of the hack fixed the bug in WhatsApp version 2.19.230. It even responded to the discovery through a statement to The Next Web - “The key point that the [vulnerability disclosure] makes is that this issue affects the user on the sender side, meaning the issue could in theory occur when the user takes action to send a GIF. The issue would impact their own device.” a WhatsApp person told TNW. “It was reported and quickly addressed last month. We have no reason to believe this affected any users though of course we are always working to provide the latest security features to our users.”
 
The researcher then replied saying that WhatsApp’s claim isn’t correct and even shared a demo of how the bug can be triggered.

 
 

 
 
 
 
 

Related Topics

 
 
 

Trending News & Articles

 Article
Tata Harrier’s 7-seater Version H7X Will Be Quite Different – Report

Tata Harrier’s three-row seat version in works, details out  

Recently posted . 2K views . 0 min read
 

 Article
How to make you car as silent as a Rolls Royce inside

Rolls Royce cars are extremely luxurious. While there are many expensive pieces of equipment in Rolls Royce cars, their most relaxing feature is the silence that ...

Recently posted . 2K views . 2 min read
 

 Article
India's Top 5 Mobile Charger manufacturer Brand 2019

The following list of India's Top 5 Mobile Charger manufacture Brand 2019  

Recently posted . 2K views . 0 min read
 

 Article
Mahindra XUV300 vs Maruti Brezza, Ford EcoSport, Tata Nexon – Price

XUV300 is the latest entrant in the compact SUV segment.

Recently posted . 2K views . 0 min read
 

 
 

More in Electronics & Gadgets

 Article
'Global Goalkeeper' award for PM Modi for Swachh Bharat Abhiyan

HIGHLIGHTS   • PM Modi lauded the countrymen for contributing to the grand su...

Recently posted. 546 views . 2 min read
 

 Article
To Ladakh from Kolkata, on a cycle rickshaw

Ladakh Chale Rickshawala, a 64-minute documentary that won this year’s National Award in the ‘best exploration/adventure film’ category, is a test...

Recently posted. 610 views . 3 min read
 

 Article
After Uttarakhand, Delhi, 5.4 magnitude earthquake jolts Jammu and Kashmir

The epicentre of the earthquake was J-K-Xingjian border; no reports of casualty or damage so far.  

Recently posted. 730 views . 0 min read
 

 Video
10 Awesome Life Hacks



Recently posted . 1K views
 

 Article
Freshworks IPO creates more than 500 crorepatis in India, with 70 of them aged below 30

The Nasdaq listing comes amid increased digitisation and growing adoption of remote work during the Covid-19 pandemic, which has seen SaaS IPOs in the US perform sp...

Recently posted. 855 views . 1 min read
 

 Article
Private school teacher in UP booked after student allegedly beaten by him dies

Arbaj was allegedly beaten by his teacher Jairaj in Sadimadanput village on Tuesday, police said.  

Recently posted. 482 views . 0 min read
 

 
 
 

   Prashnavali

  Thought of the Day

“Learn from Yesterday, live for Today, hope for Tomorrow.”
Albert Einstein

Be the first one to comment on this story

Close
Post Comment
Shibu Chandran
2 hours ago

Serving political interests in another person's illness is the lowest form of human value. A 70+ y old lady has cancer.

November 28, 2016 05:00 IST
Shibu Chandran
2 hours ago

Serving political interests in another person's illness is the lowest form of human value. A 70+ y old lady has cancer.

November 28, 2016 05:00 IST
Shibu Chandran
2 hours ago

Serving political interests in another person's illness is the lowest form of human value. A 70+ y old lady has cancer.

November 28, 2016 05:00 IST
Shibu Chandran
2 hours ago

Serving political interests in another person's illness is the lowest form of human value. A 70+ y old lady has cancer.

November 28, 2016 05:00 IST


ads
Back To Top