Mobile security research firm, Check Point, has revealed a new bug in the popular cross platform messaging service, WhatsApp. The bug that appears to affect only WhatsApp Web has the potential to allow ransomware and malicious applications on your device.
WhatsApp Web as you’d know is a browser based interface for users to access the same messages as are present on their smartphone. About 200 million users out of the 900 million user base that WhatsApp enjoys use the browser based service. The bug takes advantage of the way the service handles VCards and can use it as a backdoor to install malicious applications on your phone. VCards are essentially business card files containing contact information. Given the innocuous appearance of the file, users might very easily end up opening these files. Check Point has already informed WhatsApp who are rolling out a fix right this moment. All users of the service are urged to upgrade to the latest version. It goes without saying that users should refrain from downloading files from unknown contacts and for that matter even unknown websites on the internet due to the dangers of ransomware that can trap your files unless you pay an extortionate amount.
[Via – BBC]