Automatically translated.View original post

Malwarebytes found a bug on Whatsapp.

Malwarebytes found a bug on Whatsapp that opened the way for a malware outbreak to enter the group chat.

If you talk about chat applications, many people may be familiar with LINE, but international users may be more familiar with WhatsApp, which has a wider global user. Although the application has regular security improvements, it is not easy to have bugs, and those bugs are also very dangerous.

The official website of Malwarebytes, a global anti-malware tool developer, mentioned how the Project Zero research team from Google has detected a security vulnerability on the famous chat application WhatsApp, a bug-type vulnerability that, if a user sends a file into a newly created Chat Group, leads to an automatic download by the user who enters the room, allowing hackers to use this channel for malware release, as malware files sent to the chat group are downloaded by other users as soon as they send them, allowing for widespread malware distribution by The vulnerability will be on the Android version of the application, while the iOS version has not been identified by the research team as to whether such a vulnerability exists.

Although META, the company that owns the chat application, knew about it and updated the server during November 2025. In the past 2568), however, Google reported that the update could only partially solve the problem. Google has recommended that WhatsApp users turn off automatic download settings or turn on Advanced Privacy Mode to block automatic download capabilities. In addition, if there is a new update to WhatsApp, they ask users to update the app regularly.

The research team also introduced a way to shut down the automatic download system. Users can shut down the system in the following ways.

Open WhatsApp application

Tap the three points in the right corner. Select Settings.

Select the Storage and data topic (in some models, it may be used as Data and storage usage).

In the Media auto-download subheading, users will see the words when using mobile data, when connected on Wi ‐ Fi., and when roaming.

Under these 3 headings, tick out all the Photos, Audio, Videos, Documents media types and press OK to confirm the change.

It also introduced a way to prevent WhatsApp from saving photos in the Gallery section. This can be done even while WhatsApp is downloading content. This method is as follows:

In the Settings section, select Chat.

Press Close Media visibility or similar topics like Show media in gallery.

This change will result in a potentially malicious file being trapped in a WhatsApp that acts as a dummy or a Sandbox that prevents malware from being installed conveniently (if the malware does not have the ability to break the Sandbox to the real system).

And since in this form of attack, one user must accidentally add a stranger to the group, it is necessary to protect who can join the chat group with the following privacy settings:

In the Settings section, select Privacy.

Select Groups.

Change from Everyone (Everyone) to My Contacts (Listed Recorded) or My Contacts, except followed by an unwanted number. To prevent a suspicious number from being able to join the group, it is absolute.

# Trending # Lemon 8 Howtoo # lemon 8 diary # whatsapp # freedomhack

2/17 Edited to

... Read moreในฐานะผู้ใช้ WhatsApp มานาน ผมเองก็รู้สึกกังวลกับข่าวบั๊กที่ Malwarebytes และทีม Project Zero ของ Google ได้เปิดเผยเกี่ยวกับช่องโหว่ที่เกิดขึ้นในแอปนี้ โดยเฉพาะอย่างยิ่งในเวอร์ชัน Android ซึ่งบั๊กนี้ช่วยให้มัลแวร์สามารถเข้าไปในแช็ตกลุ่มและดาวน์โหลดโดยอัตโนมัติ ทำให้มีความเสี่ยงสูงที่มัลแวร์จะระบาดอย่างรวดเร็วในกลุ่มผู้ใช้ จากประสบการณ์ส่วนตัว ผมได้ลองทำตามคำแนะนำของทีมวิจัยอย่างเคร่งครัด คือการปิดการดาวน์โหลดสื่ออัตโนมัติ (Photos, Audio, Videos, Documents) ภายใต้การตั้งค่า Storage and data ของ WhatsApp ซึ่งช่วยให้รู้สึกปลอดภัยมากขึ้น เพราะถ้าไฟล์ใดที่แปลกปลอมเข้ามา จะไม่ถูกดาวน์โหลดมาโดยอัตโนมัติ นอกจากนี้ยังได้ปิด Media visibility ในเมนู Chat เพื่อป้องกันภาพหรือไฟล์ที่ดาวน์โหลดเข้ามาแสดงในแกลเลอรีของเครื่อง ลดโอกาสที่จะติดมัลแวร์ผ่านการเปิดไฟล์เหล่านั้นโดยไม่ได้ตั้งใจ อีกสิ่งสำคัญที่ผมแนะนำคือการตั้งค่าความเป็นส่วนตัวของกลุ่ม โดยเปลี่ยนสิทธิ์ให้เฉพาะรายชื่อโทรศัพท์ที่บันทึกไว้เท่านั้นที่สามารถเพิ่มเข้ากลุ่มได้ ซึ่งช่วยป้องกันการที่ผู้ไม่หวังดีเพิ่มเบอร์แปลกหน้าที่อาจส่งมัลแวร์เข้ามาในกลุ่มแช็ต สำหรับผู้ใช้ iOS ถึงแม้จะยังไม่มีการระบุช่องโหว่เหมือนเวอร์ชัน Android แต่การป้องกันด้วยวิธีเดียวกันถือว่าควรทำเพื่อความปลอดภัย เพราะมัลแวร์นั้นไม่มีการเลือกแพลตฟอร์มที่แน่นอน สุดท้าย การอัปเดตแอป WhatsApp อยู่เสมอเป็นสิ่งที่ผมย้ำกับตัวเองว่าอย่าลืมทำ เพราะ META ได้ปรับปรุงด้านความปลอดภัยอยู่เสมอ แม้จะยังมีจุดอ่อนที่ยังไม่ได้รับการแก้ไขทั้งหมดก็ตาม การอัปเดตจะช่วยลดความเสี่ยงและช่วยให้เราใช้บริการแชทได้อย่างปลอดภัยมากขึ้น ในการใช้งานแอปแชทอย่าง WhatsApp นั้น ทุกคนควรมีสติและระมัดระวังในเรื่องของความปลอดภัยด้วย เพราะเพียงไฟล์เดียวที่ดูเหมือนไม่มีพิษภัยอาจนำไปสู่ความเสียหายครั้งใหญ่ได้โดยไม่รู้ตัว

Related posts

A MacBook Air screen displays a custom koi fish wallpaper with text overlays "MY LAPTOP SET UP! + APPS I USE FOR SCHOOL." Widgets for photos, time, and Canvas announcements are visible, along with annotations pointing to "color widget," "widgetter," and "canvas."
A MacBook Air screen shows the Launchpad with various app icons. A white circle highlights the Google Chrome icon, an app mentioned for supporting Canvas and extensions.
A MacBook Air screen displays the Launchpad with multiple app icons. White circles highlight Zoom, Notion, Notion Calendar, Stoic, and Structured, all apps used for school and self-organization.
My Laptop Set Up + Apps I used as a Student
This is the setup I use for my laptop! The apps I use for widgets: - widgetters: For time, calendar, and Spotify -Color Widgets: For picture widgets Apps I use for school/self: - Google Chrome: I use this browser as it is what supports canvas better as well as my lock browsers😭. I like go
Nathally

Nathally

71 likes

An infographic titled 'Defensive Security Browser Extensions' categorizes various browser extensions by function: Ad Blocking and Anti-Tracking, Password Management, Anti-Phishing & Malware Protection, Privacy Enhancement, and Script Blocking. It lists specific extensions under each category, created by Dan Nanni.
Useful browser extensions for defensive security
Browser extensions can quietly do a lot of security work while you browse: blocking malicious ads, managing passwords, limiting risky scripts, and warning you before phishing pages get a chance to bite 😎👆 Find high-res pdf ebooks with all my cybersecurity infographics at https://study-notes.org
Learn Linux with Dan

Learn Linux with Dan

2 likes

Do you feel like not going to work sometimes because there is no change in growth, no change in flexibility, and no change in your finances. I am Elizabeth, a digital business owner and a mentor. There was a time I worked six long days every single week. My schedule controlled me. My energy was
Liz beggs

Liz beggs

1 like

A hand holds a pink iPhone with text 'Tech 101 For Beginners' and 'Tips to help Non-Tech Savvy Users,' accompanied by laptop and phone app icons, against a brick background.
A pink iPhone in its box, illustrating the tip to 'Keep Your Devices Updated' with text explaining why updates help and advising to enable automatic updates.
An iPhone screen displaying app icons and display settings, accompanying the tip to 'Use Strong, Unique Passwords' with reasons why and advice on using combinations and password managers.
Tech Hacks For Beginners 📲💻😬
I have some great tips for non-tech savvy tech users. I know these tips will help you learn your tech more quickly and effectively. 1. Keep Your Devices Updated Why It Helps: Updates often contain security patches and improvements that help your device run smoothly. Tip: Enable automatic updat
Joy 📚

Joy 📚

284 likes

A desk setup with a curved monitor displaying a pink grid wallpaper and pixel art juice boxes. An overlay on the screen reads "How to Make Your PC Run Faster – 5 Easy Tips!". A keyboard, laptop, and drink are on the desk, with a Lemon8 watermark.
A desk setup with a monitor displaying tips for a faster PC, including "Upgrade Your Storage & RAM," "Keep Your Drivers & OS Updated," and "Check for Malware & Viruses." An overlay highlights "Upgrade Your Storage & RAM and more!" with a Lemon8 watermark.
A desk setup with a monitor displaying instructions for "Disable Startup Programs" and "Clean Temporary Files." The screen shows steps like using Task Manager and deleting temporary files. A keyboard, laptop, and drink are on the desk, with a Lemon8 watermark.
⚡ How to Make Your PC Run Faster – 5 Easy Tips! 🖥️🔥
💡 1. Disable Startup Programs 🚀 Too many apps launching at startup slow down your PC! ✅ Open Task Manager (Ctrl + Shift + Esc) ✅ Go to the Startup tab ✅ Disable unnecessary apps to speed up boot time 💡 2. Clean Temporary Files 🗑️ Over time, junk files slow your system down. ✅ Press Win
skaeszun

skaeszun

285 likes

A hand holds an iPhone displaying a purple lock screen with the time 7:08 and a cute bear-themed wallpaper. The text 'Change your ringtone on iphone' and 'SWIPE' are overlaid.
A screenshot of the App Store page for 'Garage Ringtones for iPhone,' showing a 4.7-star rating, 21K ratings, and an 'Open' button highlighted with a yellow arrow. The text 'Download and open Garage ringtone' is overlaid.
A screenshot of the Garage Ringtones app displaying a list of song remixes with play, like, install, and edit options. A blue plus button at the bottom is highlighted with an arrow. The text 'Click on the plus' is overlaid.
Change your ringtone on iphone
As you know that you can use apps to set ringtone such as Spotify on Android. Now on IOS/ IPhone you can set a ringtone. App-Garage ringtone PSA: you have to pay $4 when you open the app( for me it’s not that bad for how many I can make) ⭐️Overall rating:5 /5 #techfinds #lemon8challenge
Prisci Benitez

Prisci Benitez

81 likes

Malwarebytes Browser Guard: Safer. Cleaner. Ad-Free Browsing
Picture this. You open your browser to quickly look something up. Within seconds, your screen is flooded with pop-up ads, auto-playing videos, and flashing banners screaming for your attention. You click what looks like the close button on an ad, and suddenly a new tab opens, redirecting you to a s
best shop

best shop

0 likes

Attention Instagram users! A data leak exposed 17.5 million users' info. Find out what happened and learn how to keep your account secure. #news #technews #instagramdataleak
Cybersecurity Girl

Cybersecurity Girl

10 likes

Grab you one from @baby_cool33 on IG!! #fashion #louisvuitton #bags #purses #essessache
Sherell S Hodge

Sherell S Hodge

555 likes

A title slide with "Come Organize My IPhone and My apps With me" in pink text, set against a background of pink flowers and a green and white checkered pattern.
A phone home screen screenshot showing various app icons, including social media and utility apps, overlaid on a cat's face. Text reads "Before.... Very disorganized....".
Another phone home screen screenshot displaying numerous app icons, many with notification badges, against a cat's face background. Text states "Apps were everywhere.... And I had so many apps I didn't need!!!".
Come Organize My IPhone and My apps With me 💗
So much more organized and so much cuter so happy with out it came out 🌸💗 #aestheticiphone
Abigail rose 🌸

Abigail rose 🌸

35 likes