logo

WhatsApp may expose the OS you use to run it – which could expose you to crooks

ID: 01451945-7b97-5f00-ba8f-967e67b7c51f

STIX ID: report--01451945-7b97-5f00-ba8f-967e67b7c51f

Feed Name: The Register (Security)

Threat Score
35/100

Date Published: 2024-10-16

Date Updated: 2026-04-26

Author: Iain Thomson

...
...

Researchers at Zengo disclosed that WhatsApp's multi-device implementation exposes persistent identity-key metadata with platform-specific formats (e.g., 32-character Android IDs, 20+4 iPhone prefix, 18-character Windows IDs), enabling attackers to fingerprint users' operating systems and linked devices and potentially choose the most vulnerable target for malware. Zengo reported the issue to Meta, which acknowledged the submission but did not provide a timetable for a remediation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.