Communication is so much easier than it was just a few decades ago and so much more dangerous. Gmail users have just been warned about the most sophisticated AI-based attack, social media is a breeding ground for new threats, and even iPhone users can’t escape the cyber attackers. Meta has confirmed that a zero-click, no-interaction required hacking attack has impacted users of the WhatsApp secure messaging platform. Here’s what we know so far.
Confirmed: WhatsApp Users Impacted By Zero-Click Hack Attack
As first reported by The Guardian, WhatsApp users have been targeted by a sophisticated spyware hack attack requiring no user interaction. WhatsApp told the newspaper that it had high confidence the users it had reached out to had been targeted and possibly compromised.
Although the precise details of this latest, and frankly highly concerning, cyberattack against WhatsApp users are limited at this moment in time, Meta has confirmed that the hack “targeted a number of users including journalists and members of civil society,” and is currently notifying those thought to have been victims of the as yet unnamed attackers. “This is the latest example of why spyware companies must be held accountable for their unlawful actions. WhatsApp will continue to protect people’s ability to communicate privately,” a Meta spokesperson said.
What we do know is that a group of some 90 high-risk WhatsApp users were targeted, although Meta has not confirmed where they were located geographically although it is believed they were from more than 20 countries. What it has said, however, is that those users were compromised by spyware from an Israel-based software company called Paragon Solutions. It is understood that Meta has issued a cease and desist letter to Paragon and is exploring further legal avenues. Paragon, meanwhile, is yet to comment.
“Paragon’s spyware is known as Graphite and has capabilities that are comparable to NSO Group’s Pegasus spyware,” Stephanie Kirchgaessner, deputy head of investigations for The Guardian U.S., said, “Once a phone is infected with Graphite, the operator of the spyware has total access to the phone, including being able to read messages that are sent via encrypted applications like WhatsApp and Signal.” This is a breaking story, and I will update it as more information becomes available.
