Audio By Carbonatix
A newly-released tool that exploits a vulnerability in Facebook’s WhatsApp allows you to "put words in people’s mouths", researchers say.
A team from cybersecurity firm Checkpoint has demonstrated how the tool can be used to alter the text within quoted messages, making it look as if a person had said something they did not.
Researcher Oded Vanunu told the BBC the tool made it possible for “malicious actors” to manipulate conversations on the platform.
Facebook would not provide a comment on the issue.
The tool was demonstrated at Black Hat, a cyber-security conference in Las Vegas, as a follow up to a research paper published by Checkpoint last year.
“It’s a vulnerability that allows a malicious user to create fake news and create fraud,” Mr Vanunu explained.
The tool makes it possible to manipulate WhatsApp’s quoting feature to make it look like someone had written something they had not.
“You can completely change what someone says,” Mr Vanunu said. "You can completely manipulate every character in the quote.”
The tool also allows an attacker to change how the sender of the message is identified, making it possible to attribute a comment to a different source.
A third issue highlighted by researchers has been successfully fixed by Facebook. That flaw could trick users into believing they were sending a private message to one person, when in fact their reply went to a more public group.
But Mr Vanunu said Facebook had told them the other issues could not be resolved due to “infrastructure limitations” on WhatsApp.
In particular, the encryption technology used by WhatsApp made it extremely difficult - perhaps impossible - for the company to monitor and verify the authenticity of messages being sent by users. Other potential measures to stop the problems highlighted could result in trade-offs in the usability of the app, researchers were told.
When asked by the BBC why his team would release a tool that made it easier for others to exploit the vulnerability, Mr Vanunu defended the move, saying he hoped it would provoke discussion.
“[WhatsApp] serves 30% of the global population. It's our responsibility. There is a big problem with fake news and manipulation. It's infrastructure that serves more than 1.5 billion users.
"We cannot like put it aside and say: 'Okay, this is not happening.’"
The spread of misinformation on WhatsApp has been a major cause of concern, particularly in countries such as India and Brazil, where misinformation has lead to instances of violence, and in some cases, death.
WhatsApp made changes to its platform in an effort to reduce the spread of misinformation, such as limiting the number of times a message could be forwarded.
DISCLAIMER: The Views, Comments, Opinions, Contributions and Statements made by Readers and Contributors on this platform do not necessarily represent the views or policy of Multimedia Group Limited.
DISCLAIMER: The Views, Comments, Opinions, Contributions and Statements made by Readers and Contributors on this platform do not necessarily represent the views or policy of Multimedia Group Limited.
Latest Stories
-
Milo U13 Champs: Ahafo’s Adrobaa set for thrilling final with Franko International of Western North
1 hour -
Ghana’s HIV crisis: Stigma drives new infections as AIDS Commission bets on AI and six-month injectables
3 hours -
First Ladies unite in Accra to champion elimination of mother-to-child HIV, Syphilis, and Hepatitis B transmission
3 hours -
US Supreme Court agrees to hear case challenging birthright citizenship
4 hours -
Notorious Ashaiman robber arrested in joint police operation
5 hours -
Judge sets key dates after video evidence hurdle in Nana Agradaa appeal case
5 hours -
Who are favourites to win the 2026 World Cup?
5 hours -
Galamsey crisis spiritual, not just economic; Pulpit and policy intervention needed – Prof. Frimpong-Manso
6 hours -
We will come after you – Muntaka warns online fearmongers
6 hours -
Forestry office attack: Suspected gang leader arrested, two stolen cars recovered
7 hours -
How Asamoah Gyan reacted after Ghana was paired with England, Croatia, and Panama for the 2026 World Cup
7 hours -
Ghana Armed Forces opens 2025/2026 intake for military academy
8 hours -
Prime Insight: OSP vs. Kpebu and petitions to remove EC boss to dominate discussions this Saturday
8 hours -
Multimedia’s David Andoh selected among international journalists covering PLANETech 2025 in Israel
9 hours -
Gov’t prioritising real action over slogans – Kwakye Ofosu
10 hours
