
WhatsApp confirmed this morning (Tuesday) that a security breach was discovered that allowed spyware to be installed on smartphones.
The flaw was in the app's voice dialing, where hackers could install the spyware remotely: they called the target, without the recipient needing to answer. The call itself disappeared from the incoming call log, and the software was installed.
This way, hackers gained complete control over the content on the device - including the camera and microphone.
WhatsApp did not say who was behind the spyware, only saying: "This is a private company that is known to work with governments.".
It was reported in 'Kan' that the breach was discovered and exploited by the Israeli company NSO, whose spyware Pegasus was installed on the devices.
The Israeli NSO said in response: "NSO's technology is sold to authorized and certified government bodies for the sole purpose of investigating and preventing crime and terrorism. The company investigates any allegations of misuse of its technology, and if necessary, takes the necessary steps, including disconnecting the system.
""In no event will NSO be involved in operating the system or identifying surveillance targets, an activity that is performed exclusively by intelligence and law enforcement agencies. NSO will never use its technology to track any person or organization.".