For those who have no time: Attackers can add your number to WhatsApp groups without permission and send malicious files. With a few simple settings, you can reliably protect your smartphone.
WhatsApp group attacks are increasing rapidly. Cybercriminals exploit a little‑known function of the messenger: they can add your phone number to a group without your approval and send a manipulated file. Because of WhatsApp’s default settings, this file is downloaded automatically without any action from you. This means malware can reach your device before you even notice the danger.
How these attacks work
Attackers only need your phone number. They add you to a group and send a file that WhatsApp immediately downloads. The vulnerability was discovered by Google’s Project Zero and Malwarebytes, who warn that Meta’s patch does not fully fix the issue.
Although the malware does not execute automatically, it already resides on the device. Criminals then try to trick you—through messages or calls—into opening it. Once opened, the malicious software can steal sensitive data, install additional malware, or take full control of the phone.
Why this is so dangerous
The attack is almost invisible. There is no need to click on a link or manually download anything. Even careful users can easily fall victim. Google confirms that the vulnerability remains exploitable in several scenarios, meaning protection depends on users until a complete solution is released.
What you should do now
1. Disable automatic downloads
This is the most important step. Steps:
- Open WhatsApp
- Go to Settings
- Tap Storage and Data
- Under “Media Auto‑Download”, disable all file types
This stops any file from being saved without your approval.
2. Restrict who can add you to groups
Prevent strangers from adding you.
- Open Settings
- Go to Privacy
- Tap Groups
- Change “Everyone” to My Contacts or My Contacts Except…
This reduces the chance of being added by unknown or untrusted people.
3. Prevent files from appearing in your gallery
Another helpful protective step.
- Open Settings
- Go to Chats
- Disable “Media Visibility”
This ensures that even downloaded files do not automatically appear in your gallery.
4. How to react if you are already in a suspicious group
If you’ve been added unexpectedly:
- Leave the group immediately
- Block the number that added you
- Report the group inside WhatsApp
- Do not share any personal data
- Do not open any files or click links
Conclusion
WhatsApp group attacks are not an isolated problem—they are a growing threat affecting more and more users, especially those who rely on default settings. The good news is that you can secure your phone with just a few simple adjustments: disabling automatic downloads, limiting who can add you to groups, and blocking automatic media visibility. With these steps, you significantly reduce your risk of malware or scams. Review your settings and stay alert—prevention is your strongest defense today.