Three billion WhatsApp users are at risk - an expert has developed a tool that could spy on everyone, and you would never know about it

By knowing only a phone number, an attacker can repeatedly probe a device without sending visible messages or triggering notifications.

Silent Whisper operates below the user interface, making detection unlikely during normal phone use.

#SilentWhisper #whatsapp #meta #messaging #security #cybersecurity #hackers #hacking

https://www.techradar.com/pro/security/three-billion-whatsapp-users-are-at-risk-an-expert-has-developed-a-tool-that-could-spy-on-everyone-and-you-would-never-know-about-it

Three billion WhatsApp users are at risk - an expert has developed a tool that could spy on everyone, and you would never know about it

New tool lets anyone monitor messaging apps using just their phone numbers

TechRadar
@signalapp #SilentWhisper needs to be patched 💡 ☑️
@nemo
Disabling phone number discoverability happens to be just an accidental solution for this problem and is not really intended to solve this. By turning it off actually one is making contact discovery much more difficult, especially if one is encouraging people to move off from whatsapp.
What really concerns me here is the reluctance in the signal devs part in recognising silent whisper as a privacy and security threat and seriously discussing and looking at implementing a viable solution. If they are recommending turning off discoverability as a workaround till they come up with a solution, then it is acceptable and reasonable. But I don't see that as the case and this approach is thoroughly disappointing to say the least.
#SilentWhisper #signal #cybersecurty

🚨 Alert: Privacy trackers targeting WhatsApp and Signal users are now publicly available📱🔍 Stay vigilant and consider stronger protections. Details: https://www.heise.de/en/news/WhatsApp-and-Signal-Privacy-vulnerable-tracker-software-available-11117680.html #PrivacyMatters #WhatsApp #Signal #CyberSecurity #Newz #SilentWhisper

tl;dr Quote.: "Update
17.12.2025, 20:44 Uhr
Added the suggestion from Signal developers that disabling phone number discoverability will protect Signal users from such an attack." It will reduce the threat Keep calm & update. WA Beta has nicknames too

WhatsApp and Signal: Privacy vulnerable, tracker software available

The WhatsApp and Signal messengers reveal user information through confirmation runtimes. A setting helps.

heise online

⚠️ WhatsApp- und Signal-Nutzer: Tracker-Software macht Privatsphäre angreifbar! Heise berichtet von Tools, die Standorte und Aktivitäten nachverfolgen können. Bleibt wachsam und schützt eure Daten! 🔒📱 https://www.heise.de/news/WhatsApp-und-Signal-Privatsphaere-angreifbar-Tracker-Software-verfuegbar-11117533.html #Datenschutz #Privacy #WhatsApp #Signal #Newz #SilentWhisper

tl;dr:

Zitat: "Update
17.12.2025, 20:40 Uhr
Im Text ergänzt, dass Signal auf GitHub das Deaktivieren der Rufnummernsichtbarkeit als Gegenmaßnahme vorschlägt."

WhatsApp und Signal: Privatsphäre angreifbar, Tracker-Software verfügbar

Die WhatsApp- und Signal-Messenger verraten Informationen über Nutzer durch Bestätigungs-Laufzeiten. Eine Einstellung hilft.

heise online

3/3

For people forced to use #WhatsApp

WhatsApp's usernames with PIN protection remain available only in beta versions as of late 2025. No stable public rollout has occurred yet, despite ongoing testing across Android and iOS betas.

https://www.heise.de/en/news/WhatsApp-to-receive-usernames-with-PIN-protection-9842372.html

#silentwhisper #signal #WhatsApp

WhatsApp to receive usernames with PIN protection

The current beta version of WhatsApp allows usernames instead of phone numbers and protects against unwanted contacts with a PIN.

heise online

@kuketzblog 2/2 Für Leute die #WhatsApp nutzen müssen

In der WhatsApp-Beta für Android und iOS können Nutzer einen einzigartigen Nutzernamen reservieren, der anstelle der Handynummer für neue Kontakte genutzt wird. Andere sehen dann nur diesen Namen, nicht die Nummer, und es gibt optionale PIN-Schutz für Nachrichten von Unbekannten.

Quelle:
https://www.heise.de/news/WhatsApp-soll-Nutzernamen-mit-PIN-Schutz-erhalten-9842293.html

#silentwhisper #WhatsApp

Mehr Privatsphäre: WhatsApp bekommt Nutzernamen und PIN-Schutz

Die aktuelle Beta-Version von WhatsApp ermöglicht Nutzernamen statt Telefonnummern und schützt mit PIN vor ungewollten Kontakten.

heise online

@kuketzblog P.P.S.:

"For people who want to restrict delivery receipts, Signal already supports disabling phone number discoverability (Settings > Privacy > Phone Number > Who Can Find Me By Number). With this setting enabled, you can choose a random alphanumeric username and no one will be able to send you any messages (delivery receipts or otherwise) unless you share that username with them."

Quelle: https://github.com/signalapp/Signal-Android/pull/14463#issuecomment-3613869569

#silentwhisper #signal 1/2

2/3 "We understand that Signal cannot be everything to everybody. If people are concerned about this, as previously mentioned, you can disable discovery in the settings. If someone's threat model includes concerns about network activity in general (because let's be clear, there are many other potential vectors to consider depending on your specific threat model), we recommend using a VPN."

source: https://github.com/signalapp/Signal-Android/pull/14463#issuecomment-3643858179

Keep calm drink tea & update #silentwhisper #signal #WhatsApp

Anti timing attack features by sullystuff · Pull Request #14463 · signalapp/Signal-Android

First time contributor checklist I have read how to contribute to this project I have signed the Contributor License Agreement Contributor checklist I am following the Code Style Guidelines...

GitHub

Regardin #silentwhisper #signal

"For people who want to restrict delivery receipts, Signal already supports disabling phone number discoverability (Settings > Privacy > Phone Number > Who Can Find Me By Number). With this setting enabled, you can choose a random alphanumeric username and no one will be able to send you any messages (delivery receipts or otherwise) unless you share that username with them."

source: https://github.com/signalapp/Signal-Android/pull/14463#issuecomment-3613869569

1/3

Anti timing attack features by sullystuff · Pull Request #14463 · signalapp/Signal-Android

First time contributor checklist I have read how to contribute to this project I have signed the Contributor License Agreement Contributor checklist I am following the Code Style Guidelines...

GitHub