missing a call on WhatsApp can install spyware on your phone

Started by Thorin, May 14, 2019, 12:24:04 PM

Previous topic - Next topic

Thorin

https://www.cbc.ca/news/technology/whatsapp-spyware-infect-call-1.5134939

That's a link nto an article talking about spyware that can be installed when you have WhatsApp installed, your WhatsApp number gets called, and you don't answer.  I haven't seen any technical discussion on how this is possible yet, but holy cripes, that is a wide-open security hole...
Prayin' for a 20!

gcc thorin.c -pedantic -o Thorin
compile successful

Tom

I imagine it like sends some kind of graphic or script or /something/ that can be exploited when a call is missed. The phone displays it and wham.  Gifs and pngs have been exploited that way before, in fact i think older versions of android's image loading code is known to have code execution exploits.
<Zapata Prime> I smell Stanley... And he smells good!!!