India plans security audit of WhatsApp after hacking attempt

Friday, 29 November 2019 00:00 - - {{hitsCtrl.values.hits}}

New Delhi (Reuters): India wants to conduct an audit of WhatsApp’s security systems following revelations that a spyware exploited vulnerabilities in the Facebook-owned messaging platform, the country’s technology minister said on Thursday.

The Indian Computer Emergency Team (CERT-In) “sought submission of information from WhatsApp on November 9, 2019, including a need to conduct an audit and inspection of WhatsApp’s security systems and processes,” Ravi Shankar Prasad told parliament in a statement.

WhatsApp declined to comment.

WhatsApp last month sued Israeli surveillance firm NSO Group, accusing it of helping clients break into the phones of roughly 1,400 users across four continents. The targets of the hacking included diplomats, political dissidents, and journalists, along with military and government officials.

Of those allegedly affected by NSO’s Pegasus spyware, 121 are based in India, WhatsApp’s biggest market with over 400 million users, two sources told Reuters previously.

WhatsApp has responded to CERT’s queries but further clarifications have been sought, Prasad said, adding that the agency had also asked NSO Group to provide information about the malware and its impact on Indian users.

NSO has previously denied snooping allegations and said it sells technology to governments to counter terrorism.

WhatsApp executives including CEO Will Cathcart made no mention of the spyware when they met Indian technology ministry officials in July and September, the Minister said.

WhatsApp had, however, informed CERT of an incident in May in which the firm had identified and fixed a “vulnerability that could enable an attacker to insert and execute code on mobile devices,” Prasad said.

A group of Indians including journalists and lawyers whose phones were hacked via WhatsApp have asked the government to make public its ties with the Israeli firm accused of deploying the spyware.

Discover Kapruka, the leading online shopping platform in Sri Lanka, where you can conveniently send Gifts and Flowers to your loved ones for any event including Valentine ’s Day. Explore a wide range of popular Shopping Categories on Kapruka, including Toys, Groceries, Electronics, Birthday Cakes, Fruits, Chocolates, Flower Bouquets, Clothing, Watches, Lingerie, Gift Sets and Jewellery. Also if you’re interested in selling with Kapruka, Partner Central by Kapruka is the best solution to start with. Moreover, through Kapruka Global Shop, you can also enjoy the convenience of purchasing products from renowned platforms like Amazon and eBay and have them delivered to Sri Lanka.