A security vulnerability has been discovered in WhatsApp, potentially allowing attackers to infect Android devices with malware through group chats. Google has issued a warning about the issue.
Google’s Project Zero team recently uncovered a vulnerability affecting WhatsApp on Android devices, according to a report from security firm Malwarebytes. The flaw allows malicious media files to be automatically downloaded without any user interaction. This discovery underscores the ongoing challenges of securing popular messaging platforms.
Google Warns of WhatsApp Vulnerability: Messaging App as Gateway for Criminals
The vulnerability works by exploiting WhatsApp’s automatic download feature. With standard settings enabled, malicious software can download automatically, potentially compromising a device without the user clicking anything. An attack can occur simply by adding a user to a group and sending a malicious file.
According to Google’s Project Zero, attackers are most likely to use this vulnerability in targeted campaigns, requiring knowledge of at least one contact of the intended victim. Forbes reported that WhatsApp confirmed a “comprehensive fix” for the vulnerability on January 30, 2026, following the initial disclosure.
More Digital News from RUHR24:
Should you charge your phone overnight? Manufacturers recommend a specific approach
Android Security Risk: Millions of Citizens May Need a New Phone
Discounter Recall: Electrical Device Should Be Immediately Taken Out of Service
Securing WhatsApp: Users Should Disable Automatic Downloads
To protect against potential attacks, Google recommends disabling automatic downloads within WhatsApp. Here’s how:
- Open WhatsApp on your Android device.
- Tap the three-dot menu in the upper right corner.
- Select “Settings.”
- Navigate to “Storage and Data” (sometimes labeled “Data and Storage Usage”).
- Under “Media Auto-Download,” edit each of the three categories individually: “When using mobile data,” “When connected on Wi-Fi,” “When roaming.”
- Uncheck all boxes within each category for Photos, Audio, Videos, and Documents.
- Confirm with “OK.”
Stay up-to-date with the latest Service News:
Get all Service-related news directly to your smartphone – now Follow RUHR24 on Google!
The downside is that Android users will need to manually download received photos and other files within WhatsApp by clicking on them. However, this can also help prevent smartphone storage from filling up quickly. Those who frequently struggle with a full smartphone storage can use an unknown trick.
It’s also important to control group chat settings. Within the Privacy settings, you can specify who can create new group chats with you. The “My Contacts Only” option offers more protection against potential attacks than the “Everyone” setting.
WhatsApp in Germany: Majority of Population Uses Messaging Services
According to the Federal Statistical Office of Germany (Destatis), 83 percent of people aged 16 to 74 in Germany use messaging services such as WhatsApp, Signal, or Telegram, as of a survey conducted in the first quarter of 2025. This figure is slightly above the EU average of 82 percent.
