Skip to main content
VulnerabilityPublished

Vulnerability Allowed Scraping of 3.5 Billion WhatsApp Accounts

Source SecurityWeek

0
Severity
Medium

Rated by Threat Radar

Data as of 21 Nov 2025, 06:52 UTC

What to do

AI-suggested

To mitigate risks associated with this vulnerability, European organizations should ensure that all WhatsApp applications and backend services are updated to the latest patched versions provided by WhatsApp. Organizations should review their internal policies regarding the use of WhatsApp for sensitive communications and consider additional layers of security such as multi-factor authentication and endpoint protection. Monitoring network traffic and logs for unusual patterns indicative of enumeration or scraping attempts can help detect potential exploitation attempts. Employee awareness training should emphasize the risks of phishing and social engineering that could leverage scraped account data. For organizations with higher security requirements, alternative secure messaging platforms with stronger privacy guarantees and less exposure to enumeration risks should be evaluated. Finally, organizations should maintain compliance with GDPR by documenting the vulnerability, the response actions taken, and any potential data exposure incidents.

Description

Researchers demonstrated a now-patched vulnerability that could have been used to enumerate all WhatsApp accounts. The post Vulnerability Allowed Scraping of 3.5 Billion WhatsApp Accounts appeared first on SecurityWeek .

References

Community reviews

Loading reviews…