WhatsApp group chats can easily be infiltrated, find researchers

WhatsApp group chats can easily be infiltrated, find researchers

The team of cryptographers at Ruhr University in Bochum, Germany, found a set of security weaknesses in the messaging app that together allow anyone controlling the WhatsApp server to insert other parties into a private group thread without getting permission from the administrator who controls the group.

According to the research, Signal and WhatsApp fail to properly authenticate who is adding a new member to the group and it is possible for an unauthorised person, who is not even a member of the group, to add someone to the group chat.

The researchers detailed the findings at the Real World Crypto security conference in Zurich on Wednesday, according to Wired.

Once the unidentified person has been injected into the group, the other members would receive a message informing them that a new member has been added, seemingly at the behest of the group admin. They also point out that the lack of any authentication mechanism to deal with the invitation for new members also worsens the security.

"When an administrator wishes to add a member to a group, it sends a message to the server identifying the group and the member to add". WhatsApp is a widely used messenger and is available in more than 60 different languages which include 10 Indian languages.

Jacob Eason would make Huskies Pac-12 favorites
With Fromm at the helm, Georgia fell 26-23 in overtime to Alabama in the national title game. That would also work in Eason's favor, as per NCAA rules he would have to sit out a season.

As per the report, any hacker can gain access to a group chat on WhatsApp, despite end-to-end encryption. "He can cache all the message and then decide which get sent to whom and which not", Mr Rosler said.

A flaw in popular encrypted chat programs WhatsApp, Threema and Signal theoretically allows nearly anyone to control important servers, bypass encryption and add themselves to group chats.

WhatsApp is working on a new group notifications feature where a user will be notified every time they are mentioned by someone.

"We've looked at this issue carefully", the spokesperson added.

"Alex Stamos, the Chief Security Officer of Facebook, in response to the report said on Twitter, "[sic] Read the Wired article today about WhatsApp - scary headline! The privacy and security of our users is incredibly important to WhatsApp. "But there is no secret way into WhatsApp groups chats". They should utilize the Message Admin catch to post a message or offer media to the gathering. The concern raised here is that in groups with multiple administrators, the user can send out messages to multiple admins, fooling them about who invited the user. "And if not, the value of encryption is very little", researcher Paul Rösler was quoted saying in the report.

Related Articles

  • YouTube have finally taken action against controversial vlogger Logan Paul

    YouTube have finally taken action against controversial vlogger Logan Paul

    Earlier this week, YouTube had promised " further consequences " for Paul following a now-infamous video featuring a dead body. In a string of tweets , YouTube posted an apology in a series of tweets on their official Twitter page.
    Dropbox is said to file confidentially for initial offering

    Dropbox is said to file confidentially for initial offering

    Silicon Valley has birthed many highly valued and hugely hyped startups in recent years, including Uber, Airbnb and Pinterest. Not much is known about Dropbox's financials, other than it hit a $1 billion annual run rate in January 2017.
    Fans Believe Kylie Jenner Is Kim Kardashian's Surrogate

    Fans Believe Kylie Jenner Is Kim Kardashian's Surrogate

    However Kim is considering to breastfeed the baby after the surrogate delivers her baby. You can guess which word Kim took offense to.
  • IRS rolls out new tax tables for bigger paychecks

    IRS rolls out new tax tables for bigger paychecks

    Notice 1036 also said that employers could withhold on supplemental wages of up to $1 million at a flat rate of 22 percent. The GAO has said Wyden's request must go through its usual review process before a decision to proceed is made.
    Trump's FISA Tweet Shows Why the 25th Amendment Is Unnecessary

    Trump's FISA Tweet Shows Why the 25th Amendment Is Unnecessary

    But the tweet and its follow up continued to reverberate across Washington in the hours before the vote. Tim Walz tweets. "We weren't confused, but some of you were", press secretary Sarah Sanders said.
    National Football League  plans to 'look into' possible Rooney Rule violation by Raiders

    National Football League plans to 'look into' possible Rooney Rule violation by Raiders

    Gruden was traded to Tampa Bay in 2003 and proceeded to guide the Buccaneers to a Super Bowl championship in his first season. The Raiders played the Eagles on Christmas Day where Gruden worked the ESPN broadcast as a color analyst.
  • Quake  hits Iran-Iraq border region, felt in Baghdad

    Quake hits Iran-Iraq border region, felt in Baghdad

    The tremor has caused no casualties so far and assessment teams have been dispatched to Soomar and the suburban villages. An natural disaster of magnitude 5.1 hit parts of southern Iran on Thursday, said reports.
    Predicted Barca line up to face Real Sociedad

    Predicted Barca line up to face Real Sociedad

    Ivan Rakitic headed in a corner kick by Dembele in the final minutes to complete the rout. Moreno set up Baptistao in the 14th minute, before scoring his goal in the 34th.
    Sharp increase in West Texas flu cases

    Sharp increase in West Texas flu cases

    Doctors think the increase in flu cases may be in part because the flu vaccine may be less effective than usual this season. Experts say that even among vaccinated people who are infected by the flu virus, their illness is likely to be less severe.
  • Five takeaways from Panthers' loss to Saints

    Five takeaways from Panthers' loss to Saints

    I thought that maybe somebody had stuck a finger in my eye". "I'm not going to take the cowardly way and point somebody else out". At this time, Newton has yet to take a trip to the locker room, however, and exited the injury tent, staying on the sideline.
    Female lawmakers plan to wear black to Trump's State of the Union

    Female lawmakers plan to wear black to Trump's State of the Union

    More recently, the group spearheaded a call for a Congressional investigation into sexual misconduct allegations against Trump. The move comes after almost every woman at this year's Golden Globes wore black to show their support.
    CES 2018: TVs Are The Big Stars So Far

    CES 2018: TVs Are The Big Stars So Far

    Over the weekend, several large consumer technology companies used the CES platform to launch brand-new OLED products. Unfortunately, both the 88-inch 8K panel and the 65-inch rollable display are still in their prototype versions.