WhatsApp files a lawsuit in federal court accusing an Israeli company (NSO Group) of developing monitoring software used hundreds of times to track its users.
The lawsuit, filed in California federal court, says the Israeli company "developed the malware to obtain access to messages and other information after they were encrypted” on the victims' devices.
But the malware worked by exploiting a vulnerability ήχου-κλήσης που υπήρχε στον code of applications WhatsApp.
Users received a regular call, but the malware infected the device with spyware, giving the attackers full access.
In some cases the infection was so fast, the victim's phone had no complications while loading the spyware.
Because WhatsApp uses end-to-end encryption, it is almost impossible to access messages as they "travel" on the Internet. But in recent years, various governments and spyware companies have begun targeting the devices where messages are sent or received. The logic is that if you manage to hack the device, you can get its data.
What does WhatsApp say?
WhatsApp, owned by Facebook, quickly fixed the vulnerability. Although the company blames responsibility on the NSO Group, WhatsApp has not publicly accused the Israeli company until today.
In a post that went up shortly after the lawsuit was filed, Wills Cathcart, the head of WhatsApp, claimed that “the attackers were using servers and services hosting companies that had been used or associated” with the NSO Group and that some WhatsApp accounts used during the attacks were also traced to the Israeli company.
"Although their attack was very sophisticated, their attempts to cover their routes were not entirely successful," Cathcart said.
Overall, it appears that some 1.400 targeted devices have been affected by the hack, according to the lawsuit.
WhatsApp reported that the victims included more than 100 human rights defenders, journalists and "other members of civil society." The targets also included government officials and diplomats.
The NSO Group states: "We dispute the allegations and we will fight for it."
