2 min read
A new vulnerability has prompted WhatsApp to roll out an urgent update, following the discovery of a serious “spoofing issue” that could allow hackers to gain remote access to users’ devices through shared media files. The flaw, which affects only the Windows Desktop version of WhatsApp, was disclosed by the app’s parent company, Meta.
According to the company’s security advisory, “a maliciously crafted mismatch could have caused the recipient to inadvertently execute arbitrary code rather than view the attachment when manually opening the attachment inside WhatsApp.” This means that opening a seemingly harmless image or file might unknowingly trigger malicious code.
Although Meta hasn’t confirmed any reported victims yet, cybersecurity experts are raising red flags, especially for users active in group chats. “Most people will be part of a WhatsApp group where it is common for images to be shared and this is where this vulnerability becomes dangerous,” warned Adam Pilton, senior cybersecurity consultant at CyberSmart.
He added, “If a cyber criminal was able to share this image either in your group or with someone you trust who then goes on to share it in your group, anybody in that group could unknowingly execute the malicious code associated with the shared image.”
This flaw was identified through Meta’s bug bounty program, which rewards researchers for spotting software vulnerabilities. It’s also part of a larger, troubling trend of malware disguised as everyday files.
Users are strongly advised to update their WhatsApp desktop app immediately and avoid opening unknown attachments—even if they appear to come from trusted contacts. The warning highlights the growing sophistication of cyberattacks and the importance of staying vigilant in everyday digital interactions.
