Hackers were able to remotely install surveillance software on phones and other devices using a major vulnerability in messaging app WhatsApp, it has been confirmed.
WhatsApp, which is owned by Facebook, said the attack targeted a "select number" of users and was orchestrated by "an advanced cyber-actor".
A fix was rolled out on Friday.
On Monday, WhatsApp urged all of its 1.5 billion users to update their apps as an added precaution.
The surveillance software involved was developed by Israeli firm NSO Group, according to a report in the Financial Times.
Facebook first discovered the flaw in WhatsApp earlier in May.
WhatsApp promotes itself as a "secure" communications app because messages are end-to-end encrypted, meaning they should only be displayed in a legible form on the sender or recipient's device.
However, the surveillance software would have let an attacker read the messages on the target's device.
Some users of the app have questioned why the app store notes associated with the latest update are not explicit about the fix.
"Journalists, lawyers, activists and human rights defenders" are most likely to have been targeted, said Ahmed Zidan from the non-profit Committee to Protect Journalists.
How do I update WhatsApp?
Android
Open the Google Play store
Tap the menu at the top left of the screen
Tap My Apps & Games
If WhatsApp has recently been updated, it will appear in the list of apps with a button that says Open
If WhatsApp has not been automatically updated, the button will say Update. Tap Update to install the new version
The latest version of WhatsApp on Android is 2.19.134
iOS
Open the App Store
At the bottom of the screen, tap Updates
If WhatsApp has recently been updated, it will appear in the list of apps with a button that says Open
If WhatsApp has not been automatically updated, the button will say Update. Tap Update to install the new version
The latest version of WhatsApp on iOS is 2.19.51
How was the security flaw used?
It involved attackers using WhatsApp's voice calling function to ring a target's device.
Even if the call was not picked up, the surveillance software could be installed. According to the FT report, the call would often disappear from the device's call log.
WhatsApp told the BBC its security team was the first to identify the flaw. It shared that information with human rights groups, selected security vendors and the US Department of Justice earlier this month.
"The attack has all the hallmarks of a private company reportedly that works with governments to deliver spyware that takes over the functions of mobile phone operating systems,” the company said on Monday in a briefing document note for journalists.

The firm also published an advisory to security specialists, in which it described the flaw as: "A buffer overflow vulnerability in WhatsApp VOIP [voice over internet protocol] stack allowed remote code execution via specially crafted series of SRTCP [secure real-time transport protocol] packets sent to a target phone number.”
Prof Alan Woodward from the University of Surrey said it was a "pretty old-fashioned" method of attack.
"A buffer overflow is where a program runs into memory it should not have access to. It overflows the memory it should have and hence has access to memory in which malicious code can potentially be run," he explained.
"If you are able to pass some code through the app, you can run your own code in that area.
"In VOIP there is an initial process that dials up and establishes the call, and the flaw was in that bit. Consequently you did not need to answer the call for the attack to work."
Who is behind the software?
The NSO Group is an Israeli company that has been referred to in the past as a "cyber-arms dealer".
While some cyber-security companies report the flaws they find so that they can be fixed, others keep problems to themselves so they can be exploited or sold to law enforcement.
The NSO Group is part-owned by the London-based private equity firm Novalpina Capital, which acquired a stake in February.
NSO's flagship software, Pegasus, has the ability to collect intimate data from a target device, including capturing data through the microphone and camera, and gathering location data.
In a statement, the group said: "NSO's technology is licensed to authorised government agencies for the sole purpose of fighting crime and terror.
On the frontline of India's WhatsApp fake news war
WhatsApp sets new rules after mob killings
"The company does not operate the system, and after a rigorous licensing and vetting process, intelligence and law enforcement determine how to use the technology to support their public safety missions. We investigate any credible allegations of misuse and if necessary, we take action, including shutting down the system.
"Under no circumstances would NSO be involved in the operating or identifying of targets of its technology, which is solely operated by intelligence and law enforcement agencies. NSO would not or could not use its technology in its own right to target any person or organisation."
Who has been targeted?
WhatsApp said it was too early to know how many users had been affected by the vulnerability, although it added that suspected attacks were highly-targeted.
According to the New York Times, one of the people targeted was a London-based lawyer involved in a lawsuit against the NSO Group.
Amnesty International, which said it had been targeted by tools created by the NSO Group in the past, said this attack was one human rights groups had long feared was possible.
"They're able to infect your phone without you actually taking an action," said Danna Ingleton, deputy programme director for Amnesty Tech. She said there was mounting evidence that the tools were being used by regimes to keep prominent activists and journalists under surveillance.
"There needs to be some accountability for this, it can't just continue to be a wild west, secretive industry."
On Tuesday, a Tel Aviv court will hear a petition led by Amnesty International that calls for Israel's Ministry of Defence to revoke the NSO Group's licence to export its products.

erico2k2:

you dont ava clue,,do yah?
what is happening in Kaduna is Religious violence, you lot jst sit down and repeat exactly what comes into ur head 1st without thinking it fru, let me ask you one question, have you ever seen any Terror attack targeting the churches in the UK?if ur answer is no do you know why?

why?

Seriously, There are Christian terror organizations in the world. The kill Muslims , hinduist and others. They are anti-balaka,NLFT or NAGA. They also have an aim similar to the ISIS's.( to form a sovereign Christian state). check this out before you say anything https://en.m.wikipedia.org/wiki/Christian_terrorism
You guys should also learn a little about the Christian Crusades. It a lot like ISIS but without bombs(bomb hasn't been invented at the time). What happened in NZ is an example of religious violence. We should all condemn any sort of religious violence.

.

kmcutez:


Looks more like a hate crime to me. Wonder if he went about shouting Jesus is Lord as he was shooting at them.

Do you know of any Christian Terrorist Organizations?

Seems the opposite of Muslim is now Christian. So which God is the devil, Allah or Yahweh?

Are you sure you went to school? or are you an undergraduate? saying terrorist=muslim. Do you know of anti-balaka,NLFT or NAGA. They also have an aim similar to the ISIS's.( to form a sovereign Christian state). check this out before you say anything https://en.m.wikipedia.org/wiki/Christian_terrorism .

kmcutez:


Looks more like a hate crime to me. Wonder if he went about shouting Jesus is Lord as he was shooting at them.

Do you know of any Christian Terrorist Organizations?

Seems the opposite of Muslim is now Christian. So which God is the devil, Allah or Yahweh?

yeah, there are a few Christian terror organizations in the world.

I swear this is true. I just wan load 100 get 350 mb and use googleweblight to browse any site. I was freaking happy when I say 1500mb �

No religion preaches terrorism. Whenever we hear news of terrorism, in our mind we think "the Muslims are at it again". Islam does not support terrorism. Christian also does not support terrorism, but do you know there are " Christian"¹ terror organization.
In CAR, there is anti-balaka(a terror organization) that burned down almost all the mosques in CAR unrest. Many Muslim were killed, including a former health minister ( who is a muslim).

There is NLFT( National Liberation Front of Tripura) that wish to create a sovereign Christian state in India's Northeastern state of Tripura. They raid villages and make anybody captured convert to Christianity or die. Most of those captured are Hindus.

God's army is another terror organization that have terrorized Myanmar.

Even in USA, Last year Stephen Paddock killed 58 people and wounded about 500 others. He is an atheist. He purchased all the gun he use for this barbaric act legally. There have been 22 school shooting this year in the US. I would blame both cases I have listed to the ease a US citizen could get a gun.

To point fingers at a religion and say it support terrorism is foolish. Any terror organization support only its view and would destroy anything that would stop them from achieving their delusional aim even if that means destroying what they think they are protecting.

I'm not an English Major. I'm sorry if there is any mistakes in the post.���

gypsey:
the only people who are known to be terrorists are muslims.

Are you sure you went to school? or are you an undergraduate? saying terrorist=muslim. Do you know of anti-balaka,NLFT or NAGA. They also have an aim similar to the ISIS's.( to form a sovereign Christian state). check this out before you say anything https://en.m.wikipedia.org/wiki/Christian_terrorism .

gypsey:
yes! if christians are terrorists kill them too!! but it's very unlikely you would find a christian terrorist.

And i am not even a christian, i don't believe in Religion.
Anything else?.

Do you know what Stephen paddock did? Last year at a las Vegas hotel?

All of you should just check Wikipedia for the worst place with gun violence. Also, check the names of the perpetrators.

ok

It would be nice :-)

test

https://www.youtube.com/watch?v=fInocuyluF4
If you like the video subscribe so you can get notification once a new video is available.

MasterMind21:
Hmm

Space booking or plain curiosity?

Shanowole is an 11 year old, forced into cultism by peer pressures and environmental factors. He smokes marijuana and engages in street fights,stealing etc. Here more of his story from him.
https://www.youtube.com/watch?v=TuI3b6hnC0A

Wonderful, something that has never happen in telecom services in Nigeria is about to happen. The subscribers are already testifying to the increase speed in Glo network though not in all locations. Now, Globacom Nigeria has declared Friday 11th of August 2017 as the first FREE DATA DAY on the Glo Network.
This, it said, was in fulfillment of its pledge recently to announce a day that its subscribers would be allowed to browse the net free of charge.
In a press statement issued in Lagos on Tuesday, Globacom said that subscribers should use 100MB and N150 on voice calls OR N250 on voice calls between Friday 4th and Thursday 10th August to qualify.
The company had explained at the launch of Glo Free Data Day that the offer was in demonstration of its commitment towards giving more value to its subscribers.
All prepaid Glo subscribers are eligible for the offer, Globacom stated, adding that once they meet the voice and/or data usage threshold within seven days, they will qualify to enjoy the Free Data Day.
With the new product, subscribers on the Glo network have an opportunity to do so much more on the internet by browsing free of charge for a whole day.
You don’t need to do anything to qualify for Glo Free Data Day… Just spend N250 or more on calls in the preceding 7 days to a free data day. Fair usage policy may be applicable.
11th of August is the day. Hope this schedule won't crash Glo network?

add me on YouTube https://youtu.be/addme/gOmTq6agoppv52mmkDcbGM7IdQmMnQ

https://www.youtube.com/watch?v=mGhD8BVFAnA

IamZod:
How does it consign us now

Concern, Goal go getter.

Nice change. watch American President cameo in Home Alone 2.
https://www.youtube.com/watch?v=mGhD8BVFAnA

The cameo of donald trump in home alone 2
https://www.youtube.com/watch?v=mGhD8BVFAnA

Cacawa2:
gerrarahere mehn

Its true Cacawa2

Nice

Mynd44 seun
The boy have to kill a snake to attract attention of lalasticlala

OK.o

https://www.youtube.com/watch?v=jefoyGz_feM