Tech Desk | INVC News
The Government of India has issued a high-severity cybersecurity warning for users of WhatsApp’s desktop application. The alert, released by the Indian Computer Emergency Response Team (CERT-In), highlights a critical vulnerability in older versions of the popular messaging platform that could allow cyber attackers to gain control over user systems.
CERT-In, which functions under the Ministry of Electronics and Information Technology, has flagged the bug as a serious threat, particularly for those using outdated WhatsApp Desktop versions on Windows or macOS.
📌 What Is the Risk?
According to CERT-In’s official advisory, the flaw lies in how WhatsApp Desktop handles file attachments. Due to a mismatch between the MIME type and file extension, malicious actors can disguise harmful files to appear as benign.
If a user unknowingly opens such a file, hackers can potentially:
Install malware or spyware
Gain unauthorized access to the system
Steal sensitive files and personal data
Hijack the user’s WhatsApp account
🖥️ Who Is Affected?
The vulnerability affects users running WhatsApp Desktop versions earlier than 2.2450.6. Those who use WhatsApp on computers or laptops — especially for business or remote work — are urged to update their application immediately.
CERT-In has classified the risk level as “High Severity.”
🔐 What You Should Do Immediately
If you’re a WhatsApp Desktop user, here are the recommended actions from CERT-In:
✅ Update WhatsApp Desktop to the latest version available on the official website
🚫 Avoid clicking on suspicious links or opening attachments from unknown contacts
🔒 Enable two-step verification on your WhatsApp account
🔁 Stay informed on security updates from CERT-In or WhatsApp
📊 Why This Matters
With over two billion users globally, WhatsApp is a vital communication tool for both personal and professional use. A vulnerability of this nature not only puts individual privacy at risk but can also have serious implications for businesses, journalists, and government employees who rely on WhatsApp Desktop for daily communication.
🧭 Related Reads from INVC
This isn’t the first time WhatsApp has been in the spotlight for privacy concerns, but the CERT-In alert serves as a critical reminder that even widely used platforms aren’t immune to security flaws. Users, especially those on desktops, must stay proactive by updating apps, enabling security settings, and avoiding unsolicited files or links.
