WhatsApp fixes ‘zero-click’ bug used to hack Apple users with spyware

Spread the love

Friday WhatsApp said that it had fixed a security bug on its iOS and Mac apps that were used to hack “specific target users” Apple devices.

Meta-owned messaging app giant said in his security counselor that it has fixed the weakness, known As officially as CVE -2025-55177Which was used in addition to a separate error found in iOS and Mac, which Apple fixed the last week and Track as CVE -2025-43300The

Apple said at the time that the error was used in “highly sophisticated attacks against certain target individuals.” Now we know that dozens of WhatsApp users were targeted with these pairs of errors.

Amnesty International’s Protection Lab chief Doncha ó Serbil describes the attack In a post at X As a “advanced spyware promotion” that targets users within the last 90 days or after the end of May. Ear Serbil Bagh’s pair describes the pair as a “zero-chikon” attack, which means that it does not require any interaction from a victim to click on a link to compromise with their device.

The two bugs tied together allow the attacker to provide a contaminated absorption through WhatsApp that is capable of stealing data from the user’s Apple device.

WhatsApp posted a copy of the threat notification to the damaged users, the attack was “able to compromise with your devices and messages with it.”

It is not immediately clear who is behind the attacks, or who is a spyware dealer.

Arriving at TechCunch, Meta spokesperson Margarita Franklin confirmed that the company had detected the error and patched the error a few weeks ago and the company sent “less than 200” notifications to influence WhatsApp users.

When the spokesperson did not ask, whatsApp did not ask if any specific attacker or surveillance seller had the evidence to blame the hacks.

This is not the first time that WhatsApp has been targeted by users Public spywareA kind of malware is known as to break full patches with weaknesses that are not familiar with the seller, as known as Zero-day Defects

In May, the US court ordered Spyware Manufacturer NSO Group WhatsApp to provide $ 167 million compensation 2019 Hacking Campaign that has entered the devices of more than 1,400 WhatsApp users with an absorption capable of planting NSO pegasus spyware. WhatsApp Brings legal cases Against the NSO, the federal and state hacking laws, as well as mention the terms of its own service.

Early this year, WhatsApp Disrupt a spyware promotion It targets about 90 users, including journalists and civil society members across Italy. Italian government Has denied its involvement in promoting espionageThe Paragon, whose spyware was used to promote, later Cut Italy from its hacking tools To fail to investigate abuse.

Did you get any notice that your device was compromised? Contact this reporter securely through the username Jacheitker.1337 in the signal.

Leave a Reply

Your email address will not be published. Required fields are marked *