Threat Intelligence & APT SecurityWeek 1 month ago

WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update

CN
CyberNew Threat Research Desk
• Original Reporting: SecurityWeek
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Client Endpoints & Operating Systems
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"Users can now add more than one passkey, which can be useful for those who use the application on both iOS and Android devices. As for two-step verification, the one-time passcode that was previously a six-digit PIN is now being upgraded to a full password. The password can be longer and it can include alphanumeric and special characters."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
WhatsApp security

WhatsApp on Tuesday announced several new features designed to enhance account security, including related to passkeys, two-step verification (2SV), and caller context.

The Meta-owned messaging app says more than 1 billion individuals now rely on a passkey to log in to their WhatsApp accounts.

Users can now add more than one passkey, which can be useful for those who use the application on both iOS and Android devices.

As for two-step verification, the one-time passcode that was previously a six-digit PIN is now being upgraded to a full password. The password can be longer and it can include alphanumeric and special characters.

The last new security feature is, for the time being, only for Android users. When they get a call from a non-contact, they will see more information about the caller, including their country and whether they are members of the same WhatsApp groups.

“Scammers rely on urgency – now you can take a beat with some more info before answering,” WhatsApp said.

Advertisement. Scroll to continue reading.

Written By Eduard Kovacs

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from SecurityWeek.

Primary Advisory →