WhatsApp has warned users about a highly advanced hacking attack that infected nearly 90 people across 24 countries. Unlike traditional cyberattacks that rely on tricking victims into clicking malicious links, this attack used zero-click spyware, meaning the targets were hacked without taking any action.
What Happened?
Hackers exploited a security vulnerability in WhatsApp to send malicious documents to the victims’ devices. These documents contained spyware that could take control of the phone without the user clicking or opening anything.
According to reports, the attack was linked to Paragon Solutions, an Israeli company that develops spyware for government agencies. While governments claim such tools help in law enforcement and national security, they have also been misused to spy on journalists, activists, and members of civil society.
Who Was Targeted?
The specific names of the victims have not been disclosed, but reports confirm that journalists and human rights advocates were among those affected. Many of them were based in European nations, but the attack spread across multiple regions.
WhatsApp acted quickly to disrupt the attack and alerted the affected users. It also referred them to Citizen Lab, a cybersecurity research group that investigates digital threats.
What is a Zero-Click Attack?
A zero-click attack is a form of cyberattack where hackers do not need the victim to click, open, or download anything. Instead, the attack exploits weaknesses in apps or operating systems, allowing spyware to be installed silently.
Unlike phishing attacks that trick users into clicking harmful links, zero-click attacks bypass user interaction completely, making them much harder to detect or prevent.
How Dangerous Is This Spyware?
Once installed, the spyware can:
1. Access private messages, calls, and photos
2. Monitor activities and track location
3. Activate the microphone or camera to record conversations
4. Steal sensitive personal data
Cybersecurity experts warn that such spyware can be used for mass surveillance, threatening privacy and security worldwide.
Who is Behind the Attack?
WhatsApp has linked the spyware to Paragon Solutions, but has not revealed how this conclusion was reached. Authorities and cybersecurity professionals are now investigating further.
How to Stay Safe from Spyware Attacks
While zero-click attacks are difficult to prevent, you can reduce the risk by:
1. Keeping Your Apps Updated – Always update WhatsApp and your phone’s operating system to patch security flaws.
2. Enabling Two-Factor Authentication (2FA) – This adds an extra layer of security to your account.
3. Being Cautious with Unknown Messages – While this attack required no interaction, remaining alert can help protect against similar threats.
4. Using Encrypted and Secure Apps – Apps with end-to-end encryption, like WhatsApp and Signal, make it harder for hackers to steal data.
5. Monitoring Unusual Phone Activity – If your phone suddenly slows down, heats up, or experiences rapid battery drain, it may be infected. Run a security scan immediately.
This WhatsApp attack is a reflection of the growing threats posed by spyware. As hacking methods become more advanced and harder to detect, users must take steps to protect their digital privacy. WhatsApp’s quick response limited the damage, but the incident highlights the urgent need for stronger cybersecurity measures to prevent such attacks in the future.