WhatsApp bug allows for interception of shared locations

Share this article:

A vulnerability in WhatsApp that can enable an attacker to intercept shared locations has been acknowledged, but not yet fixed.

The bug was identified by researchers with the University of New Haven Cyber Forensics Research & Education Group. A video posted on Sunday demonstrates the vulnerability.

Users of the popular cross-platform messaging app must locate themselves on an in-app version of Google maps before sharing their locations, but because that Google maps location image is retrieved over an unencrypted “tunnel,” an attacker can intercept the data using a man-in-the-middle attack or a rogue access point, according to a Sunday post.

The researchers reported the bug to the WhatsApp security team, according to the post, which adds that a fix will be rolled out on all platforms in the next release.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

More in News

Researchers observe more than a hundred connections to 'Backoff' sinkhole

Researchers with Kaspersky Lab were able to sinkhole two command-and-control servers used by certain Backoff point-of-sale malware samples.

Judge lifts stay but Microsoft won't hand over emails during appeal

A judge has lifted a suspension of a previous order compelling Microsoft to hand over customer emails stored on a server in Ireland.

Home Depot investigates possible payment card breach

Home Depot investigates possible payment card breach

Home Depot said on Tuesday that it is working with its banking partners and law enforcement to investigate a possible data breach.