WhatsApp bug allows for interception of shared locations

Share this article:

A vulnerability in WhatsApp that can enable an attacker to intercept shared locations has been acknowledged, but not yet fixed.

The bug was identified by researchers with the University of New Haven Cyber Forensics Research & Education Group. A video posted on Sunday demonstrates the vulnerability.

Users of the popular cross-platform messaging app must locate themselves on an in-app version of Google maps before sharing their locations, but because that Google maps location image is retrieved over an unencrypted “tunnel,” an attacker can intercept the data using a man-in-the-middle attack or a rogue access point, according to a Sunday post.

The researchers reported the bug to the WhatsApp security team, according to the post, which adds that a fix will be rolled out on all platforms in the next release.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

Skills in demand: Communications and messaging experts

Skills in demand: Communications and messaging experts

The demand for infosec-focused communications and messaging pros is growing.

Company news: New execs at Malwarebytes and an acquisition by VMware

The latest mergers and acquisitions and personnel moves, including Malwarebytes, Abacus Group, VMware, Bay Dynamics, vArmour, Secunia, Norse and more.

Bridging the talent gap in health care

Bridging the talent gap in health care

Cybercriminals are primarily after patient data as it really gets them more money.