WhatsApp users are advised to take action following a recent security flaw discovery. Hackers could potentially exploit this flaw to access personal data by sending files directly to users’ phones. The vulnerability, identified by Google’s Project Zero team, is linked to the app’s automatic media download feature, which saves files instantly to devices.
Reports suggest cybercriminals have been creating bogus group chats to trick users into downloading infected files unknowingly. The extent of the impact remains uncertain, raising concerns among the app’s billions of daily users.
In response to the issue, WhatsApp has released a patch to prevent further infections. However, the incident underscores the risks associated with automatic downloads on devices. To enhance security, users are encouraged to update to the latest WhatsApp version and adjust their settings promptly.
A recommended precaution, according to cybersecurity experts like Malwarebytes, is to disable Automatic Downloads or activate WhatsApp’s Advanced Privacy Mode in the app settings. This prevents media files from being downloaded automatically in the future.
To implement this change, users can access the settings within WhatsApp, navigate to Storage and data, and modify the Media auto-download preferences for mobile data, Wi-Fi, and roaming connections. By unchecking all media types like Photos, Audio, Videos, and Documents, users can prevent automatic downloads and enhance their privacy settings.
Additionally, experts suggest limiting who can add users to groups, as the recent attack method involves adding targeted individuals and their contacts to malicious groups. Adjusting the group privacy settings to restrict additions to trusted contacts can reduce the risk of such attacks.
For users utilizing WhatsApp for professional purposes, maintaining strict control over group memberships by only allowing known contacts and approved administrators can further bolster security measures.