Vulnerability was uncovered that could allow hackers to access personal information
06:37, 06 Feb 2026Updated 10:07, 06 Feb 2026
Vulnerability was uncovered that could allow hackers to access personal information(Image: Guido Mieth via Getty Images)
WhatsApp users are being encouraged to heed the latest advice and make a quick change to their settings. The popular messaging app recently faced criticism after a security flaw was discovered that could allow hackers to access personal data by sending files directly to devices.
The issue, first identified by Google’s Project Zero team, stems from the automatic download feature, which instantly saves media onto devices. It’s believed that cyber criminals have been setting up fake group chats and subsequently inviting unsuspecting users to join. If someone accepts the invitation, the harmful files are downloaded without them realising anything is wrong.
It’s unclear how many people may have been affected, but it’s clearly a worrying development for the billions who depend on this messaging service every day. Having been made aware of the vulnerability, WhatsApp recently issued a patch which should help to prevent new infections. However, it still highlights the risk of allowing automatic downloads onto devices.
For peace of mind, it’s now recommended to make some quick adjustments and ensure you’re using the most recent version of WhatsApp on your device.
One of the most effective measures – according to the team at Malwarebytes – is to access the settings and turn off Automatic Downloads or enable WhatsApp’s Advanced Privacy Mode. This prevents any media from being automatically downloaded to your device in future.
WhatsApp users are being urged to make a quick change to their settings.(Image: Getty Images)
To switch off downloads, simply open WhatsApp on your Android device and then select the three-dot menu in the top-right corner. You should then see the option for Settings.
From there, go to Storage and data and under Media auto-download, you will see when using mobile data, when connected on Wi-Fi, and when roaming.
For each of these three options, select it and untick all media types: Photos, Audio, Videos, Documents. Then tap OK.
Make sure that each category now displays something like “No media” beneath it.
Malwarebytes also recommends it’s sensible to limit who can add you to groups as the new attack method requires the attacker to add you and one of your contacts to a new group. Restricting who can do this reduces risk.
In Settings, select Privacy, then select Groups.
Change from Everyone to My contacts or ideally My contacts except… and exclude any numbers you do not completely trust. If you use WhatsApp for work, consider limiting group membership strictly to known contacts and authorised admins.
