iPhone users have been issued an urgent warning to update their WhatsApp application following the discovery of a major security vulnerability. The flaw, which has since been patched by WhatsApp in both its iOS and Mac apps, was exploited in what experts are describing as an “advanced spyware campaign” that lasted for three months.
According to Donncha Ó Cearbhaill, head of Amnesty International’s Security Lab, the attack was particularly concerning due to its “zero-click” nature. This means that users did not need to take any action – such as clicking a link – for their devices to be compromised. Once infected, attackers could access sensitive data, including private messages. The identity of those behind the attack remains unknown.
This incident comes amid a broader rise in cyber crime globally. In the United States, 73% of adults reported experiencing an online attack, highlighting the growing threat posed by digital scams and spyware.
In response to increasing concerns over user safety, WhatsApp is also rolling out a new security feature aimed at protecting users from group chat scams. This update introduces a ‘safety overview’ screen that appears when someone receives an invitation to a group chat from an unfamiliar contact. The overview displays key information such as the group’s creation date, the identity of the inviter, and the number of members.
Additionally, users will be warned about potential scams and given guidance on how to manage who can add them to groups. They can then choose to exit the group or proceed with caution. This new feature builds on WhatsApp’s existing “context card” system, which offers group details at a glance.
The safety overview is part of WhatsApp’s wider anti-scam initiative, which has included recent collaborations with Meta and OpenAI. In June, the companies dismantled a scam operation in Cambodia that used AI-generated messages, created with ChatGPT, to lure victims into fraudulent WhatsApp groups by offering fake job opportunities.
Users are strongly advised to ensure their apps are up to date to benefit from the latest security protections.
