WhatsApp zero-click attacks target Apple users

WhatsApp zero-click attack cybersecurity iOS vulnerability social engineering

The Italian State Police have issued a security warning regarding a new wave of zero-click attacks targeting WhatsApp users on Apple devices. These highly sophisticated attacks exploit vulnerabilities in unupdated versions of iOS and the WhatsApp application, allowing cybercriminals to compromise accounts without any user interaction, such as clicking links or downloading files.

Once access is gained, attackers use social engineering to impersonate the account owner. They typically send messages to the victim's contact list, simulating emergencies to solicit urgent money transfers. To mitigate these risks, authorities recommend that users keep both iOS and WhatsApp updated to the latest versions.

Additional security measures include enabling two-step verification, limiting automatic content downloads, and regularly checking the 'Linked Devices' section in WhatsApp settings to identify and terminate unauthorized sessions. In the event of a suspected compromise, users are advised to immediately notify their contacts and initiate account recovery procedures.

Entities

Apple · Filippo Ciampanelli · Lake Orta · Meta · Omegna · Polizia di Stato · Questura di Pisa · San Vito · WhatsApp · iOS

Claims

What the coverage asserts, and how many sources carry each claim.

[● 7 SOURCES] Criminals use social engineering to impersonate account owners and request urgent money transfers from contacts. www.hwupgrade.it · www.gdmed.it · www.iltabloid.it · www.vercellioggi.it · vtrend.it · +2 more
[● 6 SOURCES] The attacks exploit vulnerabilities in unupdated versions of iOS and WhatsApp on Apple devices. www.hwupgrade.it · www.gdmed.it · www.iltabloid.it · www.vercellioggi.it · borgomanero24.it · +1 more
[● 6 SOURCES] Apple has released security updates to address these structural vulnerabilities. www.hwupgrade.it · www.gdmed.it · www.iltabloid.it · www.vercellioggi.it · borgomanero24.it · +1 more
[● 7 SOURCES] Users should keep iOS and WhatsApp updated to the latest versions to mitigate risks. www.hwupgrade.it · www.gdmed.it · www.iltabloid.it · www.vercellioggi.it · vtrend.it · +2 more
[● 7 SOURCES] Users are advised to enable two-step verification and regularly check the 'Linked Devices' section in WhatsApp settings. www.hwupgrade.it · www.gdmed.it · www.iltabloid.it · www.vercellioggi.it · vtrend.it · +2 more
[● 7 SOURCES] Zero-click attacks do not require any user interaction, such as clicking links or downloading files, to infect a device. www.hwupgrade.it · www.gdmed.it · www.iltabloid.it · www.vercellioggi.it · vtrend.it · +2 more
[● 6 SOURCES] The State Police have issued a security warning regarding a new wave of zero-click attacks targeting WhatsApp. www.hwupgrade.it · www.gdmed.it · www.iltabloid.it · www.vercellioggi.it · borgomanero24.it · +1 more
[○ 1 SOURCE] The Pisa Police Headquarters issued a specific warning via social media regarding the zero-click scam. vtrend.it