Confirmed cases

WhatsApp Group Chats Can be Found on Google

Your WhatsApp group chats may not be as secure as you think. A Twitter user discovered the flaw that would let anyone join any WhatsApp group chat.

Invitations to WhatsApp group chats are being indexed by Google, making the invite links —including links to private group chats — discoverable and available to anyone who wants to join, Motherboard reports.

Journalist Jordan Wildon said on Twitter that he discovered that WhatsApp’s “Invite to Group Link” feature lets Google index groups, making them available across the internet since the links are being shared outside of WhatsApp’s secure private messaging service.

Motherboard was able to find private groups using specific Google searches (and the results included a lot of porn-sharing groups). Once they joined a group — which was intended for NGOs accredited by the UN — they had access to all of the participants and their phone numbers.

Group admins can invalidate a link to a chat if they want to, but Wildon says he discovered that, in those situations, WhatsApp only generates a new link; it doesn’t necessarily disable the original link. WhatsApp group links come with warnings attached, reminding the person who generates the link only to share it with people they trust.

Facebook / WhatsApp spokesperson Alison Bonny said in an email to The Verge that “like all content that is shared in searchable public channels, invite links that are posted publicly on the internet can be found by other WhatsApp users,” adding that “links that users wish to share privately with people they know and trust should not be posted on a publicly accessible website.”

Google declined to provide comment on the record, but Danny Sullivan, the company’s public liaison for search, tweeted that “Search engines like Google & others list pages from the open web. That’s what’s happening here. It’s no different than any case where a site allows URLs to be publicly listed.” He included a link to directions in Google’s Help Center for blocking content from being included in search results.

WhatsApp, of course, has had its share of security-related headaches in recent months. An alleged hack by Saudi Arabia into Amazon CEO Jeff Bezos’ phone back in 2018 was reportedly carried out via a malware-infected WhatsApp message. Last May, a vulnerability discovered in the app was being used to inject spyware on Android and iOS phones via phone call.

Leave a Comment


Anxious Shoppers Besiege Massy Supermarket In Castries

Anxious shoppers besieged Massy Stores Waterfront Supermarket Tuesday morning, forcing the outlet to slow down operations to manage the crowd, reports say. Video recordings of...

Police, Civilians In Viral Confrontation In Castries

Police officers and some civilians were engaged in a confrontation in Castries that was recorded and posted on social media, becoming viral. The incident occurred...

Post Mortem Thursday For Reyes Smith – Mother Speaks

A post mortem examination has been scheduled for Thursday on young suspected drowning victim, Reyes Smith, relatives say. The seven year old died last week. His...

Saint Lucia Hands Two Wanted Men Over To Martinique Authorities

Saint Lucia police have handed two wanted men over to law enforcement authorities in Martinique, French news reports say. The handover has been confirmed by...
VIDEO: Police & Civilians Viral Confrontation in CastriesRead