WhatsApp images/videos might not be fully secure: Here's why
WhatsApp, the biggest messaging platform on the planet, offers end-to-end encryption to keep all your conversations protected from third-party access. The feature works well for text messages, but the photos, videos, audio messages you receive might not be as secure, researchers from Symantec have revealed. They say hackers could exploit a certain vulnerability to compromise your WhatsApp media files. Here's all about the issue.
WhatsApp file storage behavior creates a loophole
To note, Android apps can store downloaded media files either on internal or external storage. The internal storage remains accessible to the app itself, while external is available to third-party apps, which essentially makes media files free to move between apps. Now, the researchers from Symantec claim this external storage design also creates a loophole that could allow a hacker to access WhatsApp photos/videos.
How hackers could access your WhatsApp photos
WhatsApp stores media files on external storage, meaning downloaded photos/videos are accessible to other third-party apps with external storage access. Now, this is exactly what that creates the vulnerability; the researchers say a hacker could use a malicious app with external storage access to gain access to this data without even giving a hint to you.
They could even alter images, videos
The storage loophole not only allows access to WhatsApp media content but also enables a way for its alteration. The researchers say that the malicious apps could even be used to manipulate the photos or videos you might receive on WhatsApp. This could have major privacy implications for users who may download apps without proper review or analysis.
Even Telegram faces the same issue
Along with WhatsApp, popular messaging Telegram also faces the same issue, according to the researchers. The reason being: it downloads media files in a similar fashion when the "Save to Gallery" option is enabled within the app.
WhatsApp says changing storage setting could help
While Telegram remains tight-lipped on the matter, WhatsApp told The Verge that changing storage configuration would prevent the app from sharing media files with apps like Slack or Facebook. "WhatsApp follows current best practices provided by operating systems for media storage and looks forward to providing updates in line with Android's ongoing development," a company spokesperson said, adding that they've looked at the issue.
