While they’re known for strongly encrypting messages in transit, apps like WhatsApp and Telegram may not always be able to keep files safe after they’re on your phone. Researchers from Symantec explain how hackers could use a malicious app to subtly alter media files sent through the services.
While they’re known for strongly encrypting messages in transit, apps like WhatsApp and Telegram may not always be able to keep files safe after they’re on your phone. Researchers from Symantec explain how hackers could use a malicious app to subtly alter media files sent through the services.
On Android, apps can choose to save media, like images and audio files, through either internal storage that’s only accessible through the app, or external storage which is more widely available to other apps. WhatsApp, by default, stores media through external storage, and Telegram does so when the app’s “Save to Gallery” feature is enabled.
According to the researchers, the design means malware with external storage access could be used to access WhatsApp and Telegram media files, maybe even before the user sees them. If a user downloads a malicious app, for example, and then receives a photo on WhatsApp, a hacker could manipulate the image without the receiver ever noticing. A hacker could theoretically alter an outgoing multimedia message as well.
The researchers call the attack “Media File Jacking.” In many ways, it’s a known issue and a trade-off between privacy and accessibility for messaging apps on Android. By using the external storage setting, which is widely used, apps are more compatible with others, allowing pictures and other data to move more freely. But that comes with a cost: last year, researchers pointed out similar issues.
Telegram did not immediately respond to a request for comment. A WhatsApp spokesperson said changing its storage system would limit the service’s ability to share media files, and even introduce new privacy issues. “WhatsApp has looked closely at this issue and it’s similar to previous questions about mobile device storage impacting the app ecosystem,” the spokesperson said in a statement. “WhatsApp follows current best practices provided by operating systems for media storage and looks forward to providing updates in line with Android’s ongoing development.”
Still, these aren’t just any messaging apps. As the researchers point out, users generally trust encrypted apps “to protect the integrity of both the identity of the sender and the message content itself.”
“However,” the researchers write, “as we’ve mentioned in the past, no code is immune to security vulnerabilities.”
Ministry of Environment, Forests, and Climate Change (MoEFCC) released Model Rules for Tree Cutting in Agricultural Lands (2025) to simplify regulations and advance agroforestry
PM's State Visit to Ghana: Discover more about the trip
Gig employees demand base pay and social security benefits
EU Reveals Long-awaited Goal to Reduce Greenhouse Gas Emissions by 2040
Custodial deaths in India, what are they? Let's explore further
Deepika Padukone becomes first Indian actress to receive a star on the Hollywood Walk of Fame
14-year-old Suryavanshi smashes record 86 as India U-19 crush England in rain-hit thriller
‘2–3 crore at risk of disenfranchisement’: India bloc slams EC’s Bihar voter roll drive
Govt clears surge pricing up to 2X as new cab rules promise fairer rides and driver pay
Ex-Bangladesh PM Sheikh Hasina sentenced to six months in jail for contempt by war crimes tribunal
Ministry of Environment, Forests, and Climate Change (MoEFCC) released Model Rules for Tree Cutting in Agricultural Lands (2025) to simplify regulations and advance agroforestry
PM's State Visit to Ghana: Discover more about the trip
Gig employees demand base pay and social security benefits
EU Reveals Long-awaited Goal to Reduce Greenhouse Gas Emissions by 2040
Custodial deaths in India, what are they? Let's explore further
Deepika Padukone becomes first Indian actress to receive a star on the Hollywood Walk of Fame
14-year-old Suryavanshi smashes record 86 as India U-19 crush England in rain-hit thriller
‘2–3 crore at risk of disenfranchisement’: India bloc slams EC’s Bihar voter roll drive
Govt clears surge pricing up to 2X as new cab rules promise fairer rides and driver pay
Ex-Bangladesh PM Sheikh Hasina sentenced to six months in jail for contempt by war crimes tribunal
Copyright© educationpost.in 2024 All Rights Reserved.
Designed and Developed by @Pyndertech