FILE - This Friday, March 10, 2017, file photo shows the WhatsApp communications app on a smartphone, in New York. WhatsApp says a vulnerability in the popular communications app let mobile phones be infected with sophisticated spyware with a missed in-app call alone. (AP Photo/Patrick Sison, File)

FILE - This Friday, March 10, 2017, file photo shows the WhatsApp communications app on a smartphone, in New York. WhatsApp says a vulnerability in the popular communications app let mobile phones be infected with sophisticated spyware with a missed in-app call alone. (AP Photo/Patrick Sison, File)

WhatsApp discovers spyware that infected with a call alone

The malware was able to penetrate phones through missed calls alone via the app’s voice calling function

Spyware crafted by a sophisticated group of hackers-for-hire took advantage of a flaw in the popular WhatsApp communications program to remotely hijack dozens of phones, the company said late Monday.

The Financial Times identified the actor as Israel’s NSO Group, and WhatsApp all but confirmed the identification, describing hackers as “a private company that has been known to work with governments to deliver spyware.” A spokesman for the Facebook subsidiary later said: “We’re certainly not refuting any of the coverage you’ve seen.”

The malware was able to penetrate phones through missed calls alone via the app’s voice calling function, the spokesman said. An unknown number of people — an amount in the dozens at least would not be inaccurate — were infected with the malware, which the company discovered in early May, said the spokesman, who was not authorized to be quoted by name.

John Scott-Railton, a researcher with the internet watchdog Citizen Lab, called the hack “a very scary vulnerability.”

“There’s nothing a user could have done here, short of not having the app,” he said.

The spokesman said the flaw was discovered while “our team was putting some additional security enhancements to our voice calls” and that engineers found that people targeted for infection “might get one or two calls from a number that is not familiar to them. In the process of calling, this code gets shipped.”

WhatsApp, which has more than 1.5 billion users, immediately contacted Citizen Lab and human rights groups, quickly fixed the issue and pushed out a patch. He said WhatsApp also provided information to U.S. law enforcement officials to assist in their investigations.

“We are deeply concerned about the abuse of such capabilities,” WhatsApp said in a statement.

NSO said in a statement that its technology is used by law enforcement and intelligence agencies to fight “crime and terror.”

“We investigate any credible allegations of misuse and if necessary, we take action, including shutting down the system,” the statement said. A spokesman for Stephen Peel, whose private equity firm Novalpina recently announced the purchase of part of NSO, did not return an email seeking comment.

The revelation adds to the questions over the reach of the Israeli company’s powerful spyware, which takes advantage of digital flaws to hijack smartphones, control their cameras and effectively turn them into pocket-sized surveillance devices.

NSO’s spyware has repeatedly been found deployed to hack journalists, lawyers, human rights defenders and dissidents. Most notably, the spyware was implicated in the gruesome killing of Saudi journalist Jamal Khashoggi, who was dismembered in the Saudi consulate in Istanbul last year and whose body has never been found.

Several alleged targets of the spyware, including a close friend of Khashoggi and several Mexican civil society figures, are currently suing NSO in an Israeli court over the hacking.

Monday, Amnesty International — which said last year that one its staffers was also targeted with the spyware — said it would join in a legal bid to force Israel’s Ministry of Defence to suspend NSO’s export license.

That makes the discovery of the vulnerability particularly disturbing because one of the targets was a U.K.-based human rights lawyer, the attorney told the AP.

The lawyer, who spoke on condition of anonymity for professional reasons, said he received several suspicious missed calls over the past few months, the most recent one on Sunday, only hours before WhatsApp issued the update to users fixing the flaw.

In its statement, NSO said it “would not or could not” use its own technology to target “any person or organization, including this individual.”

___

Online:

Frank Bajak: http://twitter.com/fbajak ,

Raphael Satter: http://twitter.com/razhael

Frank Bajak And Raphael Satter, The Associated Press

Just Posted

(Dave Ogilvie/Contributed)
Injured mountain biker rescued in West Kelowna

The mountain biker reportedly has a hip injury about 1 km up the Smith Creek Road trail

Emily Steele holds up a collage of her son, 16-year-old Elijah-Iain Beauregard who was stabbed and killed in June 2019, outside of Kelowna Law Courts on June 18. (Aaron Hemens/Capital News)
Kelowna woman who fatally stabbed Eli Beauregard facing up to 1.5 years of jail time

Her jail sentence would be followed by an additional one to 1.5 years of supervision

This undated file photo provided by Ernie Carswell & Partners shows the home featured in the opening and closing scenes of The Brady Bunch in Los Angeles. Do you know the occupation of Mike Brady, the father in this show about a blended family? (Anthony Barcelo/Ernie Carswell & Partners via AP, File)
QUIZ: A celebration of dad on Father’s Day

How much do you know about famous fathers?

Asia Youngman (right) is pictured shooting another short film she wrote and directed titled Hatha. (Luba Popovic)
Peachland set to star in fantasy thriller film about N’xaxaitk’w — a.k.a. the Ogopogo

The film will follow an Indigenous teen as she navigates peer pressure, bullying and identity

Fruit farmers in the Okanagan and Creston valleys are in desperate need of cherry harvesters amid COVID-19 work shortages. (Photo: Unsplash/Abigail Miller)
‘Desperate’ need for workers at Okanagan cherry farms

Fruit farmers are worried they’ll have to abandon crops due to COVID-19 work shortages

Marco Mendicino, Minister of Immigration, Refugees and Citizenship during a press conference in Ottawa on Thursday, May 13, 2021. THE CANADIAN PRESS/Sean Kilpatrick
Canada to welcome 45,000 refugees this year, says immigration minister

Canada plans to increase persons admitted from 23,500 to 45,000 and expedite permanent residency applications

Jeanette Megens
KCR: Volunteering is sharing your story

Kelowna Community Resources shares stories of its volunteers in a weekly column

FILE – Most lanes remain closed at the Peace Arch border crossing into the U.S. from Canada, where the shared border has been closed for nonessential travel in an effort to prevent the spread of the coronavirus, Thursday, May 7, 2020, in Blaine, Wash. The restrictions at the border took effect March 21, while allowing trade and other travel deemed essential to continue. (AP Photo/Elaine Thompson)
Feds to issue update on border measures for fully vaccinated Canadians, permanent residents

Border with U.S. to remain closed to most until at least July 21

A portion of the George Road wildfire burns near Lytton, B.C. in this Friday, June 18, 2021 handout photo. THE CANADIAN PRESS/HO, BC Wildfire Service *MANDATORY CREDIT*
Blaze near Lytton spread across steep terrain, says BC Wildfire Service

Fire began Wednesday and is suspected to be human-caused, but remains under investigation

Cannabis bought in British Columbia (Ashley Wadhwani/Black Press Media)
Is it time to start thinking about greener ways to package cannabis?

Packaging suppliers are still figuring eco-friendly and affordable packaging options that fit the mandates of Cannabis Regulations

Jaimee Peters photo of a Willow Midwives helping with a birth. Willow closed its doors March 31 because of a shortage of midwives. (Contributed)
South Okanagan’s only midwifery to re-open this summer

Willow Community Midwives was forced to close because of a shortage of midwives

Blair Lebsack, owner of RGE RD restaurant, poses for a portrait in the dining room, in Edmonton, Friday, June 18, 2021. Canadian restaurants are having to find ways to deal with the rising cost of food. THE CANADIAN PRESS/Jason Franson
Canadian restaurateurs grapple with rising food costs, menu prices expected to rise

Restaurants are a low margin industry, so there’s not a lot of room to work in additional costs

Gord with a mom and her young son outside Pathways which was defunded on May 31. (Facebook)
Gord Portman with a mom and her child outside of Pathways. The sign says it all about the difference Pathways has made in people’s lives. They were defunded by Interior Health on May 31.
Penticton man takes the plunge for the recovery house that helped save his life

Gord Portman said Discovery House and Pathways have been everything in his 1 year sobriety

RCMP crest. (Black Press Media files)
Fort St. John man arrested after allegedly inviting sexual touching from children

Two children reported the incident to a trusted adult right away

Most Read