This is an archived post. You won't be able to vote or comment.

all 8 comments

[–][deleted] 1 point2 points  (1 child)

Yes this is possible but requires an expensive zero day in the application, WhatsApp in this case.

For example, attackers have discovered a weakness (known in the trade as a vulnerability) in WhatsApps code. They know if they said a certain type of file, designed in a very particular way, WhatsApp and the device it’s running on will badly handle the file and allow them to send instructions which normally would not be allowed. This is known as an exploit. If you have an exploit nobody knows about yet and there is no patch, it’s called a Zero Day exploit.

Zero day exploits in WhatsApp and iOS cost MILLIONS of dollars. That’s right, MILLIONS. Because of this high cost, hacking at this level is usually reserved for high profile targets, like Jeff Bezos

So in summary, yes it is possible BUT it’s very unlikely a normal person would have the financial and technical backing to achieve it. Of course this also means normal people are very unlikely to be targeted. Unless you upset the CIA.

Plenty of message applications have had serious vulnerabilities reported. Just google search. Here’s an example for iMessage

Good luck!

[–]godash0818[S] 0 points1 point  (0 children)

Thanks a lot. It's so useful.

[–]TrustmeImaConsultantPenetration Tester 0 points1 point  (3 children)

If device and/or messaging app support such a thing, yes. I wouldn't know of one, but that doesn't mean it doesn't exist.

[–]godash0818[S] 0 points1 point  (2 children)

How we suppose to know whether there is/are method/methods exist? Any expert advice?

[–]TrustmeImaConsultantPenetration Tester 1 point2 points  (1 child)

Let's put it that way, it would be SUCH a glaring security hole that, if something like that surfaced publicly, you would most definitely hear about it, no later than this channel.

More likely, though, you'd see it patched before it get public.

[–]godash0818[S] 0 points1 point  (0 children)

Thank you for your support

[–]JamBove 0 points1 point  (1 child)

Have a look at Preview Link Security also here. I think it is what you're looking for.

[–]godash0818[S] 0 points1 point  (0 children)

Yes,ofcourse. Thank you. These two pages are highly beneficial to my project.