Hack the popular secure messaging applications WhatsApp and Telegram

A single picture could have been used by attackers to hack the popular secure messaging applications WhatsApp and Telegram.

Security experts from checkpoint have discovered a vulnerability that was present in both messaging services. The hack only affected the browser-based versions of both WhatsApp and Telegram.

The flaw affected the way both apps process images and multimedia files, in both cases they lack verifying the presence of malicious code inside the media files.

This flaw, if exploited, would have allowed hackers to take over victims’accounts on any browser. The attackers would have exploited the issue to access victims’ personal and group conversations, videos, photos, and other shared files, contact lists, and much more.

The attack starts by sending an image containing a hidden malicious code, the flaw is triggered when the victim clicks on the picture.

“The exploitation of this vulnerability starts with the attacker sending an innocent looking file to the victim, which contains malicious code.” reads post published by security firm CheckPoint. “In WhatsApp, once the user clicks to open the image, the malicious file allows the attacker to access the local storage, where user data is stored. In Telegram, the user should click again to open a new tab, in order for the attacker to access local storage. From that point, the attacker can gain full access to the user’s account and account data. The attacker can then send the malicious file to the all victim’s contacts, opening a dangerous door to a potentially widespread attack over the WhatsApp and Telegram networks.”