WhatsApp users are advised to take action following a recent security concern. The messaging platform faced scrutiny due to a vulnerability that could potentially grant hackers access to personal information through direct file transfers. The vulnerability, identified by Google’s Project Zero team, is linked to the feature that automatically saves media files onto devices.
It is suspected that cybercriminals have been creating fraudulent group chats and inviting unsuspecting users to join. Upon acceptance, malicious files are downloaded without the user’s knowledge.
The scale of the impact remains unknown, raising alarm among the app’s billions of daily users.
WhatsApp has released a patch to address the issue and prevent new infections. However, the incident underscores the risks associated with automatic downloads.
To enhance security, users are encouraged to update their WhatsApp to the latest version and adjust settings. One recommended measure, as suggested by Malwarebytes, is to disable Automatic Downloads or activate WhatsApp’s Advanced Privacy Mode to prevent media downloads automatically.
To disable automatic downloads, users can access settings in WhatsApp, tap the three-dot menu, navigate to Storage and data, and uncheck media types such as Photos, Audio, Videos, and Documents.
Moreover, limiting group additions can reduce the risk of such attacks. By adjusting privacy settings in WhatsApp to allow only trusted contacts to add users to groups, the security posture can be strengthened.
For professional users, maintaining strict control over group memberships by restricting access to known contacts and approved administrators is advised.