WhatsApp spyware attack exploits Apple flaws in targeted campaign

  • 30/08/2025

A sophisticated hacking campaign has exploited vulnerabilities in both WhatsApp and Apple devices, targeting fewer than 200 users worldwide including civil society members and activists. Meta-owned WhatsApp confirmed the attack and has patched the flaws that allowed hackers to compromise systems through a multi-step exploitation process involving Apple device weaknesses.

Cybersecurity experts have characterized the incident as a targeted cyberespionage operation rather than a broad attack. Amnesty International’s Security Lab has launched an investigation into the campaign, with initial assessments confirming both iPhone and Android users were affected. The lab is collecting forensic data from potential victims to determine the full scope of the compromise.

Security analysts suggest the campaign may have extended beyond WhatsApp to affect other applications, highlighting concerns about complex cross-platform cyberattacks. The incident underscores particular risks for civil society members and activists, who frequently face targeting in espionage operations. WhatsApp has urged all users to update their apps and device software to ensure protection against similar vulnerabilities.

While WhatsApp moved quickly to patch the vulnerabilities and contain concerns, investigations continue to assess the complete impact of the campaign. The discovery has raised broader questions about the security of widely used communication platforms against advanced cyber threats targeting at-risk individuals.

Related News