WhatsApp bug secretly downloading malicious file to mobiles

A WhatsApp “vulnerability” was found just lately by Google’s Undertaking Zero group, the place a malicious media file is routinely being downloaded to customers’ telephones.

Hackers create group chats on the app, and as soon as a person accepts the invitation, the file is shipped to their machine with out them even understanding it.

Malwarebytes provides: “The bug impacts WhatsApp on Android and includes zero‑click on media downloads in group chats.

“You may be attacked just by being added to a bunch and having a malicious file despatched to you.”

WhatsApp launches new privateness safety characteristic

WhatsApp has now launched a brand new, lockdown-style characteristic referred to as Strict Account Settings.

When you flip this characteristic on, it’ll lock sure account settings on the app to essentially the most restrictive.

WhatsApp defined: “It is going to restrict how your WhatsApp works in some methods, like blocking attachments and media from folks not in your contacts.”

Methods to activate Strict Account Settings on WhatsApp

Strict Account Settings started rolling out on WhatsApp late final month.

To activate, head to settings, click on privateness, then superior. And that is it, simple as that.

WhatsApp added: “Strict Account Settings is certainly one of some ways we’re working to guard you from essentially the most subtle of cyber threats.

“We’ve additionally rolled out a programming language referred to as Rust behind the scenes to assist maintain your photographs, movies, and messages secure from issues like spy ware, so you may share and chat with confidence.”

Your WhatsApp messages are non-public. We use the open-source Sign protocol to encrypt them.

•⁠ ⁠Encryption occurs in your machine
•⁠ ⁠Messages are encrypted earlier than leaving your machine
•⁠ ⁠⁠Solely the meant recipient has the keys to decrypt messages
•⁠ ⁠The…

— WhatsApp (@WhatsApp) January 27, 2026

It continued: “At WhatsApp, we predict it’s best to be capable of have a non-public dialog on-line, identical to you’d in-person.

“We’ll all the time defend that proper to privateness for everybody.”

RECOMMENDED READING:

Different methods to guard in opposition to ‘malicious’ WhatsApp bug

One other method to stop undesirable information from being downloaded onto your telephone through bugs on WhatsApp is to modify off auto-download (for media), in accordance with Malwarebytes.

To do this, head to settings and click on chats, then change off ‘Media visibility’ (Android) or ‘Save to Photographs’ (Apple iOS).