WhatsApp says a vulnerability in the popular communications app let mobile phones be infected with sophisticated spyware with a missed in-app call alone. Repeated calls – even if not attended – over WhatsApp let the hackers install spyware on both iPhone and Android devices. The call log then could disappear removing all trace of the deception, the Financial Times reported.
The Facebook subsidiary says “an advanced cyber actor” infected an unknown number of people with the malware, which it says it discovered in early May.
Reportedly, WhatsApp was working on finding and fixing the issue as late as Sunday but no one is sure of exactly how many phones were targeted in the hack. A WhatsApp spokesman who would not be further identified said an amount in the dozens at least would not be inaccurate.
