A digital risk protection company has discovered a new Whatsapp vulnerability that malicious actors can exploit to subsume control of an unsuspecting user’s Whatsapp account.The process does require the use of social engineering – including ringing the victim – and trades on the fact the average Whatsapp user is not familiar with MMI codes.The new attack is another example of why WhatsApp users need to take security seriously, hot on the heels of a previous threat from Russian hackers.How Dangerous is This?This hack, first discovered by CloudSEK CEO Rahul Sasi, is facilitated by two technical facts.Firstly, the service provided by many mobile phone carriers that let you forward phone calls to a different number is automated. Secondly, Whatsapp allows users to send a one-time voicemail verification code.According to Sasi, “Within a few minutes” of the process commencing, “your WhatsApp would be logged out, and the attackers would get complete control of your account”. Want the latest tech news straight to your inbox?Sign up for the Tech.co’s weekly newsletter Please fill in your name Please fill in your email Please verify before subscribing. The malicious actor will need the target’s phone number and some significant social engineering skills for it to…
Read More











