Summary: A security advisory from Facebook Security has revealed a spoofing vulnerability (CVE-2025-30401) in WhatsApp for Windows that could allow hackers to send disguised malicious attachments. This issue affects all versions prior to 2.2450.6 and poses significant risks, as seemingly harmless files could execute harmful code. WhatsApp has since addressed the vulnerability, urging users to update to the latest version.
Affected: WhatsApp for Windows
Keypoints :
- The vulnerability allows hackers to send malware through deceptive file attachments.
- WhatsApp mismanaged file handling by displaying attachments based on MIME type instead of file extension.
- Recommendations for users include a layered defense strategy, including scanning and education about attachment risks.
- WhatsApp has released a fix, and users are encouraged to update to version 2.2450.6 or later.
Source: https://hackread.com/whatsapp-windows-flaw-hackers-sneak-malicious-files/