Cert-In issues high-severity warning for WhatsApp desktop users

The Indian Computer Emergency Response Team (Cert-In), on April 9, an agency under the Ministry of Electronics and Information Technology, issued a high-severity alert regarding a security vulnerability, affecting WhatsApp desktop users who are currently using the Windows version earlier than 2.2450.6.

The flaw allows attackers to gain unauthorised access to files by running any commands or code on the user's computer.

“The vulnerability exists due to misconfiguration between the MIME type and file extension, leading to improper handling of attachment openings," said the agency, according to The Times of India.

The statement from Cert-In further added that a potential attacker could have the capability to exploit this vulnerability by "crafting malicious attachments". Such attachments could execute arbitrary code in case they are opened manually within WhatsApp desktop application by the user.

More from Tech

How WhatsApp users can arm themselves against this security loophole

WhatsApp is the most popular online messaging application, having around 3.5 billion active users worldwide. If you are a person who uses the WhatsApp desktop application, here are a few precautionary measures flagged by Cert.In

Update WhatsApp desktop

Keeping your WhatsApp desktop application updated is crucial. Updates often include fixes for security vulnerabilities and bugs. Often, they also introduce new security features that could be helpful in protecting your computer system from potential threats from hackers.

Avoid suspicious files

Never open file attachments from unknown or untrusted sources. Moreover, even in the case of files sent from familiar contacts, it is ideal to treat files that appear unusual or unexpected with caution. These could be signs of a compromised account or malware attempt.

Maintain system security

Ensure your Windows operating system is always up to date by installing the latest security patches. Enable firewall protection and use a comprehensive security suite that includes malware detection to strengthen your defense against unauthorised access and cyber threats.