WhatsApp users are advised to take immediate action following the discovery of a security flaw that could expose personal data to hackers. The vulnerability, brought to light by Google’s Project Zero team, revolves around the app’s automatic download feature, which saves media files directly to devices.
Reports suggest cybercriminals are exploiting this flaw by creating fake group chats and luring unsuspecting users to join. Once a user accepts the invitation, malicious files are downloaded without their knowledge.
The extent of the impact remains uncertain, raising concerns among the app’s billions of daily users. WhatsApp has released a fix to address the issue, emphasizing the risks associated with automatic downloads.
To safeguard their devices, users are urged to update to the latest version of WhatsApp and adjust settings to prevent automatic media downloads. One recommended approach, endorsed by Malwarebytes, involves disabling Automatic Downloads or enabling WhatsApp’s Advanced Privacy Mode to block future media downloads.
To modify settings, users can access the WhatsApp menu, navigate to Settings, and adjust the Media auto-download preferences for mobile data, Wi-Fi, and roaming connections. Disabling media types such as Photos, Audio, Videos, and Documents is recommended.
Additionally, users are advised to restrict group membership permissions to trusted contacts and approved administrators to mitigate risks of unauthorized group additions. This proactive step can reduce vulnerability to potential attacks through group chats.