Seva
03-16-2017, 08:21 AM
In the web version of WhatsApp and Telegram and other apps with end-to-end encryption there is a vulnerability that allows attackers to gain full access to others ' accounts.
According to experts, to remember proekspluatirovat the vulnerability is very easy, you just send the victim a harmless at first glance, the image with embedded malicious code. As soon as the user opens the image, the attacker will have full access to the data stored in WhatsApp and Telegram including personal and group conversations, photos, videos, and other transferred files, contacts and so on.
Check Point notified the team about the problem March 7, 2017. The developers responded very quickly and released a fix. The web versions of messengers it is recommended to restart the browser.
The problem was the lack of validation sent in WhatsApp and Telegram content before encryption. The developers have fixed it, and now spread via instant messenger, malicious content is impossible.
According to experts, to remember proekspluatirovat the vulnerability is very easy, you just send the victim a harmless at first glance, the image with embedded malicious code. As soon as the user opens the image, the attacker will have full access to the data stored in WhatsApp and Telegram including personal and group conversations, photos, videos, and other transferred files, contacts and so on.
Check Point notified the team about the problem March 7, 2017. The developers responded very quickly and released a fix. The web versions of messengers it is recommended to restart the browser.
The problem was the lack of validation sent in WhatsApp and Telegram content before encryption. The developers have fixed it, and now spread via instant messenger, malicious content is impossible.