Urgent warning for all iPhone and Android users as one simple setting could be leaving you vulnerable to dangerous attacks
Topics: Phones, Technology, US News
Gerrard Kaonga
Featured Image Credit: Getty Images/Tim Robberts
Topics: Phones, Technology, US News
The National Security Agency (NSA) has said iPhone and Android users need to be aware of a potential security risk posed by their messaging apps.
In the digital age, it is important to always be aware of the many ways nefarious individuals might be trying to get access to our information.
Since everyone has a phone, it is even more important because it can be easy to forget just how much data and information is stored on these devices.
As well as this, many of us would prefer if our messages and groupchats stay private and for our eyes only.
Advert
The NSA has now issued a warning to these phone users because one simple setting could make it easier for attackers to gain access, however.
It is important to note that the secure messaging apps on your phone aren't dangerous, as the majority take their own security very seriously and have certain measures in place to prevent attacks.
However, a user’s own behavior can be the difference in security.
The NSA warning came last month and was prompted by Google’s Threat Intelligence Group who discovered Russia’s GRU was tricking Ukrainian officials into opening access to their Signal accounts, allowing the Russians to listen in.
This wasn’t a flaw with Signal, however, as it was working as was intended. Google also warned this issue can extend to other messaging apps like WhatsApp and Telegram.
The vulnerabilities relate to features in both Signal and WhatsApp that make them easier to use.
Linked Devices allow a person to access the messaging apps on another device. This can prove useful if you don’t have your phone but want to use the apps.
This is easily mitigated, however, as both Signal and WhatsApp have the option that shows all the devices linked to the account. If in doubt, simply remove any devices you don’t recognize.
Another potential vulnerability is Group Links, a simple way for you to invite new members into a group chat by sending them a link rather than adding them individually.
Simply following the link can allow individuals access to a group even if they are not meant to be in there, however.
On Signal, this can be countered by disabling the Group Link from within the group’s settings.
This isn’t available on WhatsApp, however, the issue can be sidestepped by changing the group options to ensure only Admins can add members.
What is said in the group chat, stays in the group chat.