Vulnerability Allowed Scraping of 3.5 Billion WhatsApp Accounts
Source SecurityWeek
Rated by Threat Radar
Data as of 21 Nov 2025, 06:52 UTC
What to do
AI-suggested
To mitigate risks associated with this vulnerability, European organizations should ensure that all WhatsApp applications and backend services are updated to the latest patched versions provided by WhatsApp. Organizations should review their internal policies regarding the use of WhatsApp for sensitive communications and consider additional layers of security such as multi-factor authentication and endpoint protection. Monitoring network traffic and logs for unusual patterns indicative of enumeration or scraping attempts can help detect potential exploitation attempts. Employee awareness training should emphasize the risks of phishing and social engineering that could leverage scraped account data. For organizations with higher security requirements, alternative secure messaging platforms with stronger privacy guarantees and less exposure to enumeration risks should be evaluated. Finally, organizations should maintain compliance with GDPR by documenting the vulnerability, the response actions taken, and any potential data exposure incidents.
Description
Researchers demonstrated a now-patched vulnerability that could have been used to enumerate all WhatsApp accounts. The post Vulnerability Allowed Scraping of 3.5 Billion WhatsApp Accounts appeared first on SecurityWeek .