WhatsApp Spyware Alert: Here’s What iPhone & Mac Users Must Do Now

The Indian government has issued a high-severity warning for iPhone and Mac users following the discovery of a sophisticated spyware vulnerability on WhatsApp. The alert, circulated by the Indian Computer Emergency Response Team (CERT-In), highlights risks that could allow attackers to bypass device authorization and access sensitive data remotely.

WhatsApp has reportedly notified affected users about the threat, emphasizing that the attacks involve highly advanced techniques. Experts say the spyware can infiltrate devices without requiring a conventional download or malware installation. Even receiving or opening a single message may trigger unauthorized access.

“This issue stems from improper handling of linked device synchronization messages. Exploitation could allow content from arbitrary URLs to be processed on the target device,” CERT-In explained in its advisory.

The vulnerability primarily impacts WhatsApp users on iOS and macOS platforms, including the following versions:

* WhatsApp for iOS prior to 2.25.21.73

* WhatsApp Business for iOS version 2.25.21.78

* WhatsApp for Mac version 2.25.21.78

Security experts warn that spyware of this type, including Pegasus-style tools, are increasingly being used for targeted cyberattacks. Although billions use WhatsApp globally for messaging, calls, and file sharing, attackers often focus on specific individuals rather than mass exploitation.

WhatsApp has issued a security advisory urging all iPhone and Mac users to update their apps immediately. Users can install the latest version via the App Store by searching for WhatsApp and tapping the update option.

CERT-In’s alert underscores the need for heightened vigilance, particularly as such attacks can compromise personal and professional communications remotely. Users are encouraged to regularly update software and remain cautious of unsolicited messages or links.