Newsbytes
  • India
  • Business
  • World
  • Politics
  • Sports
  • Science
  • Entertainment
  • Auto
  • Lifestyle
  • Inspirational
  • Career
  • Bengaluru
  • Delhi
  • Mumbai
  • Videos
  • Find Cricket Statistics
Hindi
More
Newsbytes
Hindi
Newsbytes
User Placeholder

Hi,

Logout


India
Business
World
Politics
Sports
Science
Entertainment
Auto
Lifestyle
Inspirational
Career
Bengaluru
Delhi
Mumbai
Videos
Find Cricket Statistics

More Links
  • Videos

Download Android App

Follow us on
  • Facebook
  • Twitter
  • Linkedin
  • Youtube
 
Home / News / Science News / Your WhatsApp-linked number could show up in Google Search
  • Science

    Your WhatsApp-linked number could show up in Google Search

    Shubham Sharma
    Written by
    Shubham Sharma
    Twitter
    Last updated on Jun 07, 2020, 09:14 pm
    Your WhatsApp-linked number could show up in Google Search
  • Your WhatsApp-linked number, maybe even name and email address, could be leaking through Google Search.

    A security researcher has flagged a critical vulnerability in the Facebook-owned messaging service - an issue that can allow anyone to look up the above-mentioned information on Google and create a database for social engineering-based attacks.

    Here is all you need to know about it.

  • In this article
    Problem with WhatsApp's 'Click to Chat' feature These numbers are indexed by Google Anyone could dig up WhatsApp numbers This could be used for major attacks Meanwhile, WhatsApp says it is not an issue
  • Issue

    Problem with WhatsApp's 'Click to Chat' feature

  • The bug in question, as security researcher Athul Jayaram explained to Threatpost, pertains to WhatsApp's Click to Chat feature, which allows businesses to create a link or QR for their WhatsApp number.

    The function is widely used by small and medium businesses to link their WhatsApp contact number on their website and let any visitor directly chat with them, without even knowing their number.

  • Search

    These numbers are indexed by Google

  • While the feature works seamlessly, Jayaram noted that its behavior is such that WhatsApp numbers, using the Click to Chat feature and linked to websites, are automatically indexed by search engines.

    This, he said, quietly exposes those WhatsApp numbers as well as other account-related data like name and email (in some cases) in plain text on Google and other search engines.

  • Leak

    Anyone could dig up WhatsApp numbers

    Anyone could dig up WhatsApp numbers
  • WhatsApp numbers using Click to Chat are indexed as part of the (https://wa.me/...) URL.

    This means you could use a specially crafted search string of the domain https://wa.me/ to discover the numbers.

    Jayaram was able to use the string to mine as many as 300,000 WhatsApp numbers, while we at NewsBytes were able to dig up dozens using the same trick.

  • Concern

    This could be used for major attacks

    This could be used for major attacks
  • In our search, which was personalized for Indian numbers, most WhatsApp accounts that showed up were business accounts maintained by retailers, institutes, and other small businesses. Many of them even had their business location and email on display.

    This kind of data could be easily compiled to carry out sophisticated phishing attacks and trick these people into giving away money or more information.

  • Response

    Meanwhile, WhatsApp says it is not an issue

    Meanwhile, WhatsApp says it is not an issue
  • When contacted, WhatsApp said it is not a bug and the numbers are public because the users wanted them to be.

    "While we appreciate this researcher's report... it merely contained a search engine index of URLs that WhatsApp users chose to make public," the company told Threatpost.

    "All WhatsApp users, including businesses, can block unwanted messages with the tap of a button," it added.

  • WhatsApp
  • Security
  • Google
  • Social Media
  • NewsBytes
  •  
Latest News
  • NewsBytes Briefing: Investigation uncovers Facebook's pro ISIS move, and more
    NewsBytes Briefing: Investigation uncovers Facebook's pro ISIS move, and more
    Science
  • PUBG: New State announced for iOS, Android; Unavailable in India
    PUBG: New State announced for iOS, Android; Unavailable in India
    Science
  • Indian versions of 'Suits', 'House', 'Monk', 'SNL' are being planned
    Indian versions of 'Suits', 'House', 'Monk', 'SNL' are being planned
    Entertainment
  • Google integrates lightweight HTML5 games into Chrome browser on Android
    Google integrates lightweight HTML5 games into Chrome browser on Android
    Science
  • Sony announces next-generation PSVR headset for the PlayStation 5
    Sony announces next-generation PSVR headset for the PlayStation 5
    Science
Related Timelines
  • WhatsApp group invite links, user profiles accessible via Google search
    WhatsApp group invite links, user profiles accessible via Google search
    Science
  • NewsBytes Briefing: SoftBank considering bidders for TikTok India, and more
    NewsBytes Briefing: SoftBank considering bidders for TikTok India, and more
    Science
  • #BugAlert: Attackers can use Google Drive to hack your system
    #BugAlert: Attackers can use Google Drive to hack your system
    Science
  • #WeeklyRecap: Free Google Meet, bugs in Chrome, Microsoft Teams, more
    #WeeklyRecap: Free Google Meet, bugs in Chrome, Microsoft Teams, more
    Science
Trending Topics
Samsung Facebook Amazon OnePlus Mobiles Android TV Smart TV Latest Gadget Launch MediaTek Dimensity 1000+ COVAXIN Latest Tech News Upcoming Mobile Phones
Next News Article
Share
Cancel

Want to share it with your friends too?

Facebook Whatsapp Twitter Linkedin
Copied

Love Science news?

Subscribe to stay updated.

Science Thumbnail
India News Business News World News Politics News Sports News Science News Entertainment News Auto News Lifestyle News Inspirational News
Career News Bengaluru News Delhi News Mumbai News Bharti Airtel Mukesh Ambani Indian Premier League Samsung Virat Kohli Rohit Sharma
Cricket News Narendra Modi Facebook YouTube Hollywood News WhatsApp Bollywood News ISRO Rahul Gandhi Yoga
Honda Batman Football News BMW Vaccine Reliance Jio OPPO Amazon Food News, Healthy Recipes Royal Challengers Bangalore
Toyota Fashion Tips Farmers Protest Mercedes Isha Ambani India Vs England Cricket OnePlus Mobiles Android TV Smart TV Marvel Comics
Avengers Neha Kakkar Premier League Big Bang Theory
About Us Privacy Policy Terms & Conditions Contact Us News Reviews News Archive Topics Archive Find Cricket Statistics
Follow us on
Facebook Twitter Linkedin Youtube
All rights reserved © NewsBytes 2021