Summary

Some iPhone users are at risk from a WhatsApp attack that can happen without warning and without the user clicking a link, downloading a file, or doing anything wrong. These are often called “zero-click” attacks, and they are especially dangerous because the user may not see anything suspicious and may have no chance to stop the attack in the moment. WhatsApp and Apple have released fixes, but users need to update both WhatsApp and their iPhone software to help protect themselves.

Who Is at Risk

Anyone using WhatsApp on an iPhone may be at risk if either WhatsApp or the iPhone’s software has not been updated recently (beyond iOS 16).

What to Watch For

Watch for unexpected logouts from WhatsApp, messages you did not send, or friends reporting strange messages coming from your account.

What to Do

Update your iPhone and WhatsApp immediately.