WhatsApp Security Concerns Rise After Israeli Official's Chat Leak
Translated & summarized from Calcalist by baba
The leak of WhatsApp messages from Yonatan Urikh, an advisor to Prime Minister Netanyahu, has raised user concerns about app security. Urikh's account was vulnerable due to connecting to a UAE service and publicly sharing code for a monitoring tool. While these were severe breaches, the article states the risk to average users is minimal due to end-to-end encryption. Access typically requires device compromise or social engineering, but users can protect themselves with common sense, checking linked devices, and enabling two-step verification.
The story in 5 lines · by baba
- Yonatan Urikh, advisor to PM Netanyahu, had his WhatsApp messages leaked due to security oversights.
- Urikh connected his account to a UAE service providing unencrypted access and shared code for a monitoring tool on GitHub.
- WhatsApp messages are end-to-end encrypted, making direct interception or server access by attackers very difficult.
- Primary risks to users involve device compromise or social engineering tactics, such as phishing or SMS code manipulation.
- Users can enhance security by checking linked devices and enabling WhatsApp's two-step verification feature.
The recent leak of WhatsApp messages belonging to Yonatan Urikh, an advisor to Prime Minister Netanyahu, has sparked widespread concern among users about the security of their own communications. Urikh's account was reportedly compromised due to his own actions, including connecting his WhatsApp to a service from the UAE called ultramsg, which provided unencrypted access to his chats and media. This service could have allowed UAE authorities access to the data due to local laws. The operator of ultramsg is believed to be an individual, possibly based in Syria or Saudi Arabia, rather than a formal company.
Further complicating matters, Urikh had also developed a media monitoring tool for the Netanyahus using Anthropic's Claude. He published the code for this tool on GitHub, inadvertently exposing sensitive information, technical details, and unique identifiers for WhatsApp groups. This exposure could have allowed unauthorized access to group members, their phone numbers, and the ability to extract group content or send messages from within them. Either of these actions, the insecure code on GitHub or the connection to the UAE service, could have been the entry point for the leak.
Despite these serious breaches, the article emphasizes that for the average user, the risk of similar data leaks is extremely low, especially when basic security precautions are taken. WhatsApp messages are end-to-end encrypted, meaning only the sender and recipient can read them, not even WhatsApp itself. Attackers cannot read intercepted communications or data from WhatsApp servers.
The primary ways an attacker could access WhatsApp content are by compromising the user's device, for example, using spyware like NSO's Pegasus, or through social engineering tactics. These tactics can include tricking users into scanning a QR code on a phishing site that mimics a legitimate service, or by manipulating the WhatsApp verification process. This might involve an attacker requesting a verification code sent via SMS, claiming it was sent to the wrong number.
To protect against such threats, users are advised to exercise common sense, such as not sharing SMS codes with others or scanning QR codes from unknown websites. Additional security measures include regularly checking the 'Linked Devices' section in WhatsApp settings and removing any unrecognized devices. Activating 'Two-step verification' is also recommended, which requires a PIN when registering a phone number on a new device, in addition to the SMS code. The article concludes by noting that a determined and sophisticated attacker has a high chance of success if they target an individual, urging users to remain vigilant against unusual requests or behavior.
The same event, reported separately by each outlet. Open a few to compare what different newsrooms emphasize — and what they leave out.
Left 1Centre 5Right 2Haredi 2Other 7
Not the same event — other stories that share this one’s people, places, or theme: background, reactions, and follow-ups.
