The group call feature proved very popular during the lockout and isolation period during the COVID-19 pandemic. This is not only true for WhatsApp, but other similar applications. Experts revealed security holes in WhatsApp’s new feature related to group calls.
Previously, every time we made a WhatsApp group call, participants who couldn’t join at first couldn’t connect later, but now it’s different.
WhatsApp app developers have added capabilities that allow participants to join in on ongoing conversations. Previously, the same functionality was also available in the Microsoft Teams messenger app.
This feature is really simple and makes the user comfortable. However, from a security standpoint, says Kaspersky Chief Security Researcher Victor Chebyshev, the ability to participate in continuous calls can increase the risk of awareness.
Generally, if cybercriminals are in a WhatsApp group, it is not difficult for them to connect with the call. These actors just have to wait until most of the participants have joined and hope they can participate without being noticed.
“They don’t have to wait too long for the call to start, because they can be in touch at any moment,” Chebyshev said in a written statement on Sunday (25/7/2021).
It should be noted, group members especially administrators, are able to track participants and ensure outsiders do not join. In addition, the messenger app itself ensures the privacy of data exchange within groups through the use of end-to-end encryption.
Thus, both the app itself, as well as those trying to launch a man-in-the-middle attack, will be able to intercept correspondence or group calls, including group calls.
“To date, most malicious software has focused on intercepting WhatsApp messages and archived online dialogues, and we haven’t found a case related to intercepting any calls, especially group calls,” Chebyshev said.
However, Chebyshev added, if the device is infected, the Trojan will most likely have the ability to record a microphone and camera on the device, allowing criminals to eavesdrop on any conversation, regardless of the communication channel used, whether it's instant messengers or regular phone calls.
Tags
APPS & GAMES
