OshDigital

Careless Whisper: Exploiting Silent Delivery Receipts for IM Monitoring

The research paper identifies a critical privacy vulnerability dubbed Careless Whisper, which exploits silent delivery receipts in popular instant messengers like WhatsApp and Signal. By sending specifically crafted, non-notifying messages, an attacker can monitor a user’s real-time activity, including screen status, application usage, and daily routines, without their knowledge. This side-channel attack is accessible to "spooky strangers" who only possess a victim's phone number, bypassing traditional contact list protections. Furthermore, the researchers demonstrate that this technique can be used for resource exhaustion, such as covertly draining a device's battery or data allowance. The study concludes that the current multi-device architecture and lack of client-side validation necessitate urgent design changes to protect global users.

Ever wondered how companies find security weaknesses in their systems? 🤔

Nessus vulnerability scanning helps spot issues like outdated software and open ports before hackers can use them. simple, smart, and essential for staying secure 🔐

Cybercriminals are now using fake QR codes to steal personal information.

Pause. Check. Verify before you scan.

Stay cyber-smart and stop Quishing attacks.

Anatomy of a Phishing Attack