WhatsApp and Telegram are the names of messaging apps everyone is familiar with. We all use them on a daily basis so they are more like our daily driver and we are way too much dependable on them. But recently something crazy has happened. A few days back, a cybersecurity company named Symantec has come up with a detailed explanation of both of these platform being “exposed and manipulated by malicious actors“ through “media file jacking.”
Though WhatsApp and Telegram both claim themselves to be secure messaging services with end-to-end encryption. The vulnerability exploits the short gap of time between smartphone writing a file (photo, video, etc) to the external storage disk and then displaying the information in the UI of the application itself. This time-lapse may seem short but this window is more than enough for an attacker/hacker to manipulate and misuse all the information in no time. They can easily replace a file before the user interacts with it.
See also: Over 25 million Android phones compromised due to hidden WhatsApp malware
Data that is being saved to the internal storage cannot be exploited by any third party app, but the data that is being stored on the external storage can be exploited. By default external data storage is selected for WhatsApp and for Telegram it is as a user setting.
WhatsApp has responded to all this “had looked closely at this issue and it’s similar to previous questions about mobile device storage impacting the app ecosystem. WhatsApp follows current best practices provided by operating systems for media storage and looks forward to providing updates in line with Android’s ongoing development. The suggested changes here could both create privacy complications for our users and limit how photos and files could be shared.“ Telegram did not offer a response to this.
By the time this gets fixed by the developers, Android’s WhatsApp and Telegram users can change their settings and make sure that the media files are not saved on the external storage.
Apple is reportedly preparing for a significant design overhaul with its iPhone 17 series, blending…
Karachi: A private school in Karachi has unveiled Pakistan’s first AI-powered teacher, a groundbreaking move…
Third-party apps have long been a staple of the Android ecosystem, but their appeal has…
ISLAMABAD: The Competition Commission of Pakistan (CCP) has completed its Phase-II review of Pakistan Telecommunication…
Xiaomi has shattered records by producing 100,000 vehicles in just 230 days. This is nearly…
OpenAI, in collaboration with nonprofit organization Common Sense Media, announced on Wednesday the launch of…