How to Crash Your Friends' WhatsApp Just By Sending Crazy Smileys


What would require crashing the wildly popular WhatsApp messaging application?

 Nearly 4000 Smileys.

Yes, you can crash your friends' WhatsApp, both WhatsApp Web and mobile application, by sending them not any specially crafted messages, but just Smileys.

 Indrajeet Bhuyan, an independent researcher, has reported The Hacker News a new bug in WhatsApp that could allow anyone to remotely crash most popular messaging app just by sending nearly 4000 emojis to the target user, thereby affecting up to 1 Billion users.

Bhuyan is the same researcher who reported a very popular WhatsApp crash bug last year that required 2000 words (2kb in size) message in the special character set to remotely crash Whatsapp messenger app.

After this discovery, the company patched the bug by setting up the limits of characters in WhatsApp text messages, but unfortunately, it failed to set up limits for smileys send via WhatsApp.

"In WhatsApp Web, Whatsapp allows 65500-6600 characters, but after typing about 4200-4400 smiley browser starts to slow down," Bhuyan wrote in his blog post. "But since the limit is not yet reached so WhatsApp allows to go on inserting...when it receives it overflows the buffer and it crashes."


The recent bug tested on Android devices by multiple brands and successfully crashed:

  • WhatsApp for Android devices including Marshmallow, Lollipop and Kitkat
  • WhatsApp Web for Chrome, Opera and Firefox web browsers. 

It is sure that the latest version of WhatsApp is affected by this bug.

Video Demonstration 
You can also watch the Proof-of-Concept (PoC) video that shows the attack in work.





 How to Protect Yourself 

 Bhuyan told The Hacker News that he had reported the WhatsApp crash bug to Facebook. However, before the company patches the issue, there is a simple way out.

If you become a victim of such message on WhatsApp, just open your messenger and delete the whole conversation with the sender.

However, remember, if you have kept some records of your chat with that particular friend, you’ll end up losing them all.

At the beginning of this year, Bhuyan also reported two separate bugs — WhatsApp Photo Privacy bug and WhatsApp Web Photo Sync Bug — in the WhatsApp web client that in some way exposes its users’ privacy.


Comments

Post a Comment

Popular posts from this blog

How to transfer apps on Andriod phone-to-phone

Image
Hello guys, here is a way in which you can transfer any file on your android device including apps installed, from on phone/device to another. I would just keep this short, no stress, no worries required. Its easy. Follow the steps below to to transfer apps on Android from phone/device-to-phone/device ; Step 1 - Click the link or go to Google play and download Bluetooth File Transfer Step 2 - After installing it. Turn on your Bluetooth. Step 3 - Look for the Installed Bluetooth File Transfer app, open it Step 4 - While on the interface, click the options button on your Android phone. Step 5 - Go for more, and select "Send applications" We are done! Now you can send application from your android phone or device to another android phone or device
Read more

Here's the Facebook Hacking Tool that Can Really Hack Accounts.

Image
Yes, you heard me right. A newly discovered Facebook hacking tool actually has the capability to hack Facebook account, but YOURS, and not the one you desires to hack. How to Hack Facebook account? How to Hack my Girlfriends Facebook account? My boyfriend is cheating on me, How do I hack his Facebook Account? These are the queries that most of the Internet users search on Google. But Beware! If you come across any Facebook hacking tool that promises you to help you hack your friends Facebook accounts, you may end up downloading a hacking tool that could hack you, instead of them. Dubbed Remtasu, the tool is marketing itself as a Facebook hacking tool but actually is a Windows-based Trojan that has accelerated globally over the past year, and has now capability to disguise itself as an app for accessing people's Facebook account credentials. The tool contains a Keylogger that can capture all your keystrokes and store them in a file that is subsequently sent to...
Read more