{"id":31002,"date":"2019-12-17T11:45:48","date_gmt":"2019-12-17T11:45:48","guid":{"rendered":"https:\/\/www.intelligentcio.com\/africa\/2019\/12\/17\/check-point-research-discovers-whatsapp-crash-bug-that-works-by-malicious-group-message\/"},"modified":"2019-12-17T11:46:25","modified_gmt":"2019-12-17T11:46:25","slug":"check-point-research-discovers-whatsapp-crash-bug-that-works-by-malicious-group-message","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/africa\/2019\/12\/17\/check-point-research-discovers-whatsapp-crash-bug-that-works-by-malicious-group-message\/","title":{"rendered":"Check Point Research discovers \u2018WhatsApp crash\u2019 bug that works by malicious group message"},"content":{"rendered":"\n

Check Point Research, the threat intelligence arm of\u00a0Check Point,\u00a0has revealed it helped mitigate a new vulnerability in WhatsApp<\/a> that could allow a threat actor to deliver a malicious group chat message that would crash the app for all members of the group. <\/p>\n\n\n\n

To regain use of WhatsApp, users would need to uninstall and reinstall it, then delete the group which contains the message.<\/p>\n\n\n\n

To create the malicious message\nthat would impact a WhatsApp group, the threat actor would need to be a member\nof the target group (WhatsApp allows up to 256 users per group). From there,\nthe they would need to use WhatsApp Web and their web browser\u2019s debugging tool\nto edit specific message parameters and send the edited text to the group. This\nedited message would cause a crash loop for group members, denying users access\nto all WhatsApp functions until they reinstall WhatsApp and delete the group\nwith the malicious message.<\/p>\n\n\n\n

Oded Vanunu, Check Point\u2019s Head of Product Vulnerability Research, said: \u201cBecause WhatsApp is one of the world\u2019s leading communication channels for consumers, businesses and government agencies, the ability to stop people using WhatsApp and delete valuable information from group chats is a powerful weapon for bad actors. All WhatsApp users should update to the latest version of the app to protect themselves against this possible attack.\u201d\u00a0 <\/p>\n\n\n\n

Check Point Research responsibly disclosed its findings to the WhatsApp bug bounty program on August 28, 2019. WhatsApp acknowledged the findings and developed a fix to resolve the issue, which is available since WhatsApp version number 2.19.58.\u00a0 Users should manually apply this on their devices. \u201cWhatsApp responded quickly and responsibly to deploy the mitigation against exploitation of this vulnerability,\u201d said Oded Vanunu. <\/p>\n\n\n\n

\u201cWhatsApp greatly values the work of the technology community to help us maintain strong security for our users globally,\u201d said WhatsApp Software Engineer, Ehren Kret. <\/p>\n\n\n\n

\u201cThanks to the responsible submission from Check Point to our bug bounty program, we quickly resolved this issue for all WhatsApp apps in mid-September. We have also recently added new controls to prevent people from being added to unwanted groups to avoid communication with untrusted parties all together.\u201d<\/p>\n\n\n\n

The Check Point Research team found the vulnerability by inspecting the communications between WhatsApp and WhatsApp Web, the web version of the app which mirrors all messages sent and received from the user\u2019s phone. <\/p>\n\n\n\n

This enabled researchers to see the parameters used for WhatsApp communications and manipulate them. This new research builds on the ‘FakesApp’ flaws discovered by Check Point Research, which allowed group chat messages to be edited to spread fake news.\u00a0 <\/p>\n\n\n\n

WhatsApp has 1.5 billion users and more than a billion groups, making it the most popular instant messaging app worldwide. Over 65 billion messages are sent via WhatsApp per day.<\/p>\n","protected":false},"excerpt":{"rendered":"

Check Point Research, the threat intelligence arm of\u00a0Check Point,\u00a0has revealed it helped mitigate a new vulnerability in WhatsApp that could allow a threat actor to deliver a malicious group chat message that would crash the app for all members of the group. To regain use of WhatsApp, users would need to uninstall and reinstall it, […]<\/p>\n","protected":false},"author":28,"featured_media":31005,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5,399,54,13],"tags":[12067,1172,12068,817,12069,6520],"class_list":["post-31002","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-enterprise-security","category-more-news","category-research","category-top-stories","tag-bug-bounty","tag-check-point","tag-head-of-product-vulnerability-research","tag-research","tag-software-engineer-ehren-kret","tag-whatsapp"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/31002","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/comments?post=31002"}],"version-history":[{"count":1,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/31002\/revisions"}],"predecessor-version":[{"id":31004,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/31002\/revisions\/31004"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media\/31005"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media?parent=31002"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/categories?post=31002"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/tags?post=31002"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}