The latest WhatsApp hack sees users impersonated by attackers

HACKERS are infiltrating WhatsApp messages to impersonate users and spread fake news, cyber security researchers claim.

The latest hack sees attackers infiltrate WhatsApp message threads and impersonate users to spread fake news. Picture: AFP/Arun Sankar

WHATSAPP users are being warned of a newly discovered attack that allows hackers to infiltrate your private messages and group chats.

Coupled with other tactics, the flaw could allow scammers to impersonate you and even spread fake messages to your mates on the chat app, The Sun reports.

A WhatsApp attacker infiltrates a group message thread (replying ‘Great!’) before quoting and changing that text for it to be sent to the whole group.

The exploit — identified by Check Point Research cybersecurity analysts — is made possible by vulnerabilities between WhatsApp for mobile and WhatsApp for the web (which users have to synch to in order to send messages on their desktop).

According to Check Point, cyber criminals can employ shady tactics to manipulate your messages such as using the ‘quote’ feature in a group conversation to change the identity of the sender, even if that person is not a member of the group.

Another trick is to alter the text of someone’s Whatsapp reply, essentially putting words into their mouth.

Hackers will also send a private message to a group chat member, disguised as a public message for all, so when the targeted individual responds, everyone in the conversation can see it.

In this hack, the attacker infiltrates the chat by sending a message back to themselves on behalf of the other person (eg ‘I did’), as if it had come from them.

The complex attack method will likely appear as incomprehensible jibberish to general users, but it essentially requires a hacker to insert themself between the app’s encrypted traffic.

Check Point said it has notified WhatsApp of the issues.

In response, the company “acknowledged” the flaws, explaining they’re part of the platform’s “design framework” but said it’s open to further discussion.

“We believe these vulnerabilities to be of the utmost importance and require attention,” Check Point Research said.

In a recent blog post, WhatsApp wrote: “WhatsApp cares deeply about your safety.

“We encourage you to think before sharing messages that were forwarded.

“As a reminder, you can report spam or block a contact in one tap and can always reach out to WhatsApp directly for help.”

This originally appeared in The Sun and is reproduced with permission.

Originally published as The latest WhatsApp hack sees users impersonated by attackers