HACKING THE MESSENGER

The method:

An attacker can merely ring a target phone through a WhatsApp call. It need not be answered, meaning a so-called missed call would work as a hack. The call would often disappear from logs.

The discovery:

The problem was first reported by a UK-based lawyer who noticed suspicious calls on WhatsApp and approached researchers. WhatsApp said it separately too found the flaw.

The suspects:

Reports said the spyware belonged to Israeli company NSO Group, and carried references to Pegasus – NSO’s flagship product that spies using microphone, camera.