Connecting to LinkedIn...



WhatsApp conversations can be stolen on Android devices

13/03/2014 by


A Dutch researcher published a proof of concepton Tuesday that shows how a malicious application can be used to steal WhatsApp conversations on Android devices – which is particularly disconcerting considering a reported 400 million people use the cross-platform instant messaging service each month.

In this instance, the WhatsApp database being stored to the Android device’s SD card can be accessed by another app, so long as the user allows it, according to a blog post by Bas Bosschert. The root of the problem lies in the Android Application Sandbox, which is meant to isolate app data and code execution.

In his proof of concept, Bosschert created an app that can access the SD card and can be used to upload the WhatsApp databases to a web server he established. The app displays a loading screen during the WhatsApp database upload, ultimately tricking users into thinking something is going on in the background.

“The WhatsApp database is a SQLite3 database which can be converted to Excel for easier access,” Bosschert wrote. “Lately WhatsApp is using encryption to encrypt the database, so it can no longer be opened by SQLite. But we can simply decrypt this database using a simple python script. This script converts the crypted database to a plain SQLite3 database (got key from Whatsapp Xtract).”

On Monday, WhatsApp – which was acquired by Facebook in February for $19 billion – launched an update for its app, but this issue still persists, according to Bosschert.

“I think this is a significant issue since it shows how poor security and programming practices can affect all of us as users, even when there is no malicious intent,” Domingo Guerra, president and founder of Appthority, said.

This article has been extracted from, please click on this link to read the article in full

Montash is a multi-award winning , global IT recruitment firm. Specialising in permanent and contract positions across mid-senior appointments across a wide range of industry sectors and IT functions including:

ERP, BI & Data, Information Security, IT Architecture & Strategy, Scientific Technologies, Demand IT and Business Engagement, Digital and E-commerce, Infrastructure and Service Delivery, Project and Programme Delivery.

For more information please contact us on +44 (0) 20 7014 0230 or alternatively send us an email on

comments powered by Disqus

Social Stream

Latest News


Humans remain largest security flaw in cloud ...

2016-10-21 14:00:00 +0100

With a vast number of companies moving some, if not all, of their operations to the cloud, security continues to be of major concern. Whilst there are numerous patches and firewalls to safeguard defences, it has been highlighted that the most difficult area to protect against is human interaction. This is the view of Jamie Woodruff, a penetration tester and ethical hacker. Woodruff’s views come after he was contracted to conduct a penetration test in or...


Offshore exploration providing boost for oil ...

2016-10-19 09:00:00 +0100

The oil and gas industry has had a notoriously challenging time of late, with the prices of oil plummeting and causing many firms to tighten their belts. However, offshore exploration is providing a much-needed bright spot for the sector, with an increasing number of governments becoming more accommodating. In the past week, it has been revealed that there are big changes afoot for Brazil’s petroleum laws. Shell has already begun to move on this opportu...