WhatsApp for Web vulnerability could give hackers control over computers
At least 200 million people are thought to be using the web interface, which security researchers claim puts their devices and security at risk
![Young people are proving particularly vulnerable to online radicalisation](https://static.independent.co.uk/s3fs-public/thumbnails/image/2015/08/26/20/GettyImages-470695763.jpg)
Support truly
independent journalism
Our mission is to deliver unbiased, fact-based reporting that holds power to account and exposes the truth.
Whether $5 or $50, every contribution counts.
Support us to deliver journalism without an agenda.
![Louise Thomas](https://static.independent.co.uk/static-assets/support-us/louise-thomas.png)
Louise Thomas
Editor
Users of WhatsApp for Web could easily have their security and devices compromised, security researchers have claimed.
The web interface — which lets people read and write messages on their computer — has a security issue that lets hackers take over computers using just a phone number and a simple message, according to researchers at Check Point.
At least 200 million people are thought to be using the online interface, according to estimates. The app is available on almost every platform, after the company quietly launched it on iPhone recently.
All of those users could be vulnerable to the exploit, according to the security firm. Hackers would just send them a small, apparently innocent contacts file — which, when opened, would allow hackers to run malicious code and leave them open to being hit by code that could take control of their computer, watching what they are doing, or use it to spread viruses.
WhatsApp has acknowledged the issue and has rolled out an update to web clients that blocks the problem feature. Check Point advises that users check that they are using a fully up-to-date version of the web client to ensure that they are not vulnerable to the problem.
The security issues were a result of the fact that the WhatsApp web platform lets anyone see files or media attachments that are sent by users. One such a file type was vCard contact files, which would appear as innocent to users but then would actually be an executable file that can install viruses.
Subscribe to Independent Premium to bookmark this article
Want to bookmark your favourite articles and stories to read or reference later? Start your Independent Premium subscription today.
Join our commenting forum
Join thought-provoking conversations, follow other Independent readers and see their replies
Comments