Whatsapp Web Messages, Contacts Leaked on Search Engines

Private user data from the web version of Whatsapp has been indexed by Google due to a missing tag.

Private user data from the web version of Whatsapp has been indexed by Google due to a missing tag.

Independent cybersecurity expert Rajshekhar Rajaharia explained that Whatsapp forgot to add the “noindex” tag to the Web version to prevent user data from being searched.

Rajaharia said that WhatsApp was supposed to use an automated instruction file embedded in its links to instruct Google to not index its links but did not work fully due to the missing tag.

Since the data could be viewed using Google search cybercriminals can use the information for spam and phishing operations.

Whatsapp has not yet commented on the discovered vulnerability and there has been no announcement regarding an update or fix. 


© Fourth Estate® — All Rights Reserved.
This material may not be published, broadcast, rewritten or redistributed.