Earlier this year, WhatsApp rolled E2E encryption on its messenger app, potentially pulling millions more conversation out of the purview of intruders. However, after a survey, a UAE-based non-profit online safety organisation, Emirates Safer Internet Society (E-SAFE) has warned app users that it takes about 30 seconds to access into an instant messaging app like WhatsApp.
Reported by the Khaleej Times, the E-SAFE team provided a live demo during a Press conference explaining how an intruder could trick users to gain access to their instant messaging app account.
In a survey, the E-SAFE team found that about 77 of the app users never log out of the WhatsApp-Web, an option that allows users to chat and access on their PC’s. “Once an intruder is in contact with a phone, he can access all content on WhatsApp by scanning the phone’s QR code on a computer through the online WhatsApp site. After the QR code is scanned, the intruder can send messages to all contacts and delete messages from contacts on the app,” said Al Hashemi from E-SAFE.
Moreover, the survey found that about 88 per cent of WhatsApp allows their family members to access their phone unattended, while around 22 per cent said they allow their friends to go through their phones.
The E-SAFE team has also reached out to the WhatsApp Inc following the discovery of the misuse of the app’s web feature. “We have contacted them to urge the app’s makers to introduce a safety notification feature that informs users whenever their WhatsApp account is accessed from any web service,” said Mohammad Mustafa Saidalavi, founder and chief operating officer of E-SAFE.
Based on the study conducted by E-SAFE, we suggest users to avoid handling over their phones to a family member or a friend. Also, we urge them to log out from WhatsApp Web browser after completion of work.
