WhatsApp Windows Version Vulnerable to Cyberattacks, Meta Warns

Meta, the parent company of Facebook, has issued a warning about a notable⁤ security vulnerability affecting ⁤the Microsoft Windows version of whatsapp. This flaw could expose users to various cyberattacks,including potential ransomware incidents.

According⁢ to Meta’s advisory, the vulnerability, identified as ⁣CVE-2025-30401, exists in WhatsApp versions prior to 2.2450.6. The issue stems from how WhatsApp handles file attachments.While the platform displays attachments based on their Multipurpose Internet Mail Extensions (MIME) type, it relies‍ on the actual ⁣file name to determine the‍ request⁣ used to open the file.

This discrepancy creates an ‍opportunity for malicious actors.By ⁤deliberately altering the ‍MIME type of a file, an attacker⁤ could trick a recipient into executing arbitrary code when they attempt to open the attachment ⁢within WhatsApp.

In a practical scenario, a user might see an attachment that appears to be a harmless .jpeg image.⁣ Unknowingly, opening the file could actually execute ‍a‍ malicious .exe file, installing malware on their system.

WhatsApp a Prime Target for Scams

The disclosure of CVE-2025-30401 ⁢follows recent data from‍ Revolut, an online bank, indicating that WhatsApp was the primary channel for one in five scams in the United Kingdom during 2024. Revolut reported a 67% increase in such scams between June and December.

Meta’s platforms, including Facebook and Instagram, are frequently targeted ⁢by cybercriminals due to their vast user bases, ⁣many of whom⁣ may⁣ lack a strong understanding of basic online security practices.

Adam Pilton, senior cybersecurity consultant at Cybersmart, emphasized the risk posed by group chats. “Most peopel are part of WhatsApp groups⁢ where images are commonly shared, and⁣ this is where this vulnerability becomes risky,” Pilton said. “If a cybercriminal can share a malicious image within a group, or with‍ someone who then shares it, ⁣anyone in that group could unknowingly execute the⁣ associated malicious code.”

Martin Kraemer, ⁢a security awareness advocate at Knowbe4, noted the widespread ‍use of WhatsApp makes ⁢such vulnerabilities especially impactful, affecting both individual consumers and‍ organizations.

“WhatsApp has become an integral part⁢ of daily life, used ⁤for everything from ⁢scheduling haircuts to ‍sharing resumes with recruiters,” Kraemer said. “As a preferred dialogue platform, the Windows client has become essential for many, aiding in both professional and personal tasks.”

Kraemer⁤ added, “As WhatsApp is so deeply ⁤ingrained in our communication and work habits, we’ve developed⁢ automatic behaviors, a high level of trust, ⁣and a dependence that attackers exploit, as seen with this vulnerability in the Windows client. ⁣This vulnerability should not be taken lightly, and users must update their software to ⁢the latest version immediately.”

Kraemer advises whatsapp users to exercise extreme caution ⁣when opening attachments or files received through the ⁢service. He⁣ recommends treating WhatsApp like an email account and avoiding opening unexpected files, especially from unkown contacts.

Pilton added, “It’s good ⁤to see that a solution is readily available and simple to ‍implement: updating WhatsApp.”

“Cybercriminals will continue to exploit vulnerabilities in the software we use,‍ and software providers will continue to release updates or fixes to protect us against these attacks,” pilton said. “This is why vulnerability management,also known as applying software updates,is so⁤ important.”