Iranian state media urged citizens to delete the app and alleged it was sending user data to Israel. AFP
Iranian state media urged citizens to delete the app and alleged it was sending user data to Israel. AFP
Iranian state media urged citizens to delete the app and alleged it was sending user data to Israel. AFP
Iranian state media urged citizens to delete the app and alleged it was sending user data to Israel. AFP

WhatsApp security questioned as Israel remains the only known actor to hack it


Dana Alomar
  • English
  • Arabic

WhatsApp is facing renewed scrutiny after Iranian state media urged citizens to delete the app and alleged it was sending user data to Israel.

The messaging platform, owned by US tech giant Meta, denied the claim and said it was “concerned these false reports will be an excuse for our services to be blocked at a time when people need them the most”.

“We do not track your precise location, we don’t keep logs of who everyone is messaging and we do not track the personal messages people are sending one another,” a statement said. “We do not provide bulk information to any government.”

The timing of the accusation has sparked fresh debate around WhatsApp’s security, particularly given that Israel is the only country known to have successfully hacked the platform.

Strong encryption?

“WhatsApp uses strong end-to-end encryption, which means only the sender and receiver can read the messages,” said Mohammad Ismail, vice president for EMEA at Cequence Security, a company that offers application programming interfaces security management. "Even WhatsApp itself can’t see what’s being shared."

In practice, this kind of encryption is considered very secure and is trusted by security professionals around the world, he said.

"However, the biggest risks usually does not come from the encryption, but from things like someone getting access to your phone or tricking you into revealing your login,” he told The National.

Pegasus breach

In 2019, the messaging platform filed a lawsuit against Israeli spyware company NSO Group, claiming the firm’s Pegasus software had exploited a vulnerability in the app to target more than 1,400 users.

Victims included journalists, human rights defenders and activists across several countries.

The attack did not compromise WhatsApp’s end-to-end encryption. Instead it utilised a “zero-click” exploit, a method that enables spyware to be installed simply by sending a specially crafted message or call, which triggers the hack without the user needing to click or even see it.

Once Pegasus is installed, it can bypass encryption entirely by accessing messages directly, recording calls and even activating the phone’s camera and microphone without the user’s knowledge, according to the Organised Crime and Corruption Reporting Project.

The NSO Group says it licenses Pegasus exclusively to vetted government clients for use in counterterrorism and criminal investigations, and all foreign sales are subject to approval by the Israeli Defence Ministry.

Encryption v device-level threats

While WhatsApp’s encryption remains intact in such cases, security experts warn encryption alone is not enough to protect against sophisticated surveillance tools.

Experts say directly breaching WhatsApp encryption is extremely unlikely. “It would take huge computing power and advanced knowledge, which even most government agencies don’t have,” Mr Ismail said. “Instead, hackers usually go after easier targets, like hacking into your phone, sending fake links, or using spyware.”

Technical flaws and metadata risks

Subho Halder, chief executive and co-founder of Appknox, a security platform, noted that WhatsApp’s encryption protocol, the Signal Protocol, is considered the gold standard in secure messaging.

“WhatsApp’s end-to-end encryption remains mathematically unbreakable with today’s technology,” Mr Halder told The National.

However, a recent scan of WhatsApp’s latest Android build (v2.25.9.78) by Appknox uncovered several critical and high-severity implementation flaws, including insecure network configurations, hardcoded secrets and potential file access vulnerabilities.

“These don’t break encryption directly, but they expose sensitive data through poor engineering practices,” he added. “The real risk often lies not in the cryptography, but in how securely it’s implemented.”

He added that other vectors remain concerning. “WhatsApp does not encrypt metadata, like who messaged whom, when and for how long, which can still be revealing even without access to the message content,” Mr Halder said.

He noted that cloud backups, while now optionally encrypted, have previously posed security risks.

Regional distrust

The renewed concern over WhatsApp’s vulnerability comes amid broader distrust in Meta in the Middle East.

Last year, the firm updated its hate speech guidelines to restrict posts referencing Zionists, saying the term was frequently used in way to dehumanise Jews and Israelis.

However, researchers and rights groups argue this change has led to the suppression of political speech, especially from pro-Palestinian voices.

Meta has been accused of “shadow-banning” Arabic or Palestine-related content, and Human Rights Watch documented more than 1,000 instances of post removals or demotions on Facebook and Instagram in October and November last year.

Wider context in Iran

Iran’s call to delete WhatsApp is not unprecedented. The app was blocked during nationwide protests in 2022 following the death of Mahsa Amini in police custody.

Although the ban was lifted late last year, the government maintains tight control over digital communication and platforms like WhatsApp are widely used via virtual private networks (VPNs).

WhatsApp is one of Iran’s most popular messaging apps, along with Instagram and Telegram.

UAE currency: the story behind the money in your pockets
Ultra processed foods

- Carbonated drinks, sweet or savoury packaged snacks, confectionery, mass-produced packaged breads and buns 

- margarines and spreads; cookies, biscuits, pastries, cakes, and cake mixes, breakfast cereals, cereal and energy bars;

- energy drinks, milk drinks, fruit yoghurts and fruit drinks, cocoa drinks, meat and chicken extracts and instant sauces

- infant formulas and follow-on milks, health and slimming products such as powdered or fortified meal and dish substitutes,

- many ready-to-heat products including pre-prepared pies and pasta and pizza dishes, poultry and fish nuggets and sticks, sausages, burgers, hot dogs, and other reconstituted meat products, powdered and packaged instant soups, noodles and desserts.

OIL PLEDGE

At the start of Russia's invasion, IEA member countries held 1.5 billion barrels in public reserves and about 575 million barrels under obligations with industry, according to the agency's website. The two collective actions of the IEA this year of 62.7 million barrels, which was agreed on March 1, and this week's 120 million barrels amount to 9 per cent of total emergency reserves, it added.

Abramovich London

A Kensington Palace Gardens house with 15 bedrooms is valued at more than £150 million.

A three-storey penthouse at Chelsea Waterfront bought for £22 million.

Steel company Evraz drops more than 10 per cent in trading after UK officials said it was potentially supplying the Russian military.

Sale of Chelsea Football Club is now impossible.

if you go

The flights Fly Dubai, Air Arabia, Emirates, Etihad, and Royal Jordanian all offer direct, three-and-a-half-hour flights from the UAE to the Jordanian capital Amman. Alternatively, from June Fly Dubai will offer a new direct service from Dubai to Aqaba in the south of the country. See the airlines’ respective sites for varying prices or search on reliable price-comparison site Skyscanner.

The trip 

Jamie Lafferty was a guest of the Jordan Tourist Board. For more information on adventure tourism in Jordan see Visit Jordan. A number of new and established tour companies offer the chance to go caving, rock-climbing, canyoning, and mountaineering in Jordan. Prices vary depending on how many activities you want to do and how many days you plan to stay in the country. Among the leaders are Terhaal, who offer a two-day canyoning trip from Dh845 per person. If you really want to push your limits, contact the Stronger Team. For a more trek-focused trip, KE Adventure offers an eight-day trip from Dh5,300 per person.

Springsteen: Deliver Me from Nowhere

Director: Scott Cooper

Starring: Jeremy Allen White, Odessa Young, Jeremy Strong

Rating: 4/5

The Vile

Starring: Bdoor Mohammad, Jasem Alkharraz, Iman Tarik, Sarah Taibah

Director: Majid Al Ansari

Rating: 4/5

Jetour T1 specs

Engine: 2-litre turbocharged

Power: 254hp

Torque: 390Nm

Price: From Dh126,000

Available: Now

Specs

Engine: Duel electric motors
Power: 659hp
Torque: 1075Nm
On sale: Available for pre-order now
Price: On request

Defence review at a glance

• Increase defence spending to 2.5% of GDP by 2027 but given “turbulent times it may be necessary to go faster”

• Prioritise a shift towards working with AI and autonomous systems

• Invest in the resilience of military space systems.

• Number of active reserves should be increased by 20%

• More F-35 fighter jets required in the next decade

• New “hybrid Navy” with AUKUS submarines and autonomous vessels

Company%20profile
%3Cp%3E%3Cstrong%3ECompany%20name%3A%3C%2Fstrong%3E%20Fasset%0D%3Cbr%3E%3Cstrong%3EStarted%3A%20%3C%2Fstrong%3E2019%0D%3Cbr%3E%3Cstrong%3EFounders%3A%3C%2Fstrong%3E%20Mohammad%20Raafi%20Hossain%2C%20Daniel%20Ahmed%0D%3Cbr%3E%3Cstrong%3EBased%3A%3C%2Fstrong%3E%20Dubai%0D%3Cbr%3E%3Cstrong%3ESector%3A%20%3C%2Fstrong%3EFinTech%0D%3Cbr%3E%3Cstrong%3EInitial%20investment%3A%3C%2Fstrong%3E%20%242.45%20million%0D%3Cbr%3E%3Cstrong%3ECurrent%20number%20of%20staff%3A%3C%2Fstrong%3E%2086%0D%3Cbr%3E%3Cstrong%3EInvestment%20stage%3A%3C%2Fstrong%3E%20Pre-series%20B%0D%3Cbr%3E%3Cstrong%3EInvestors%3A%3C%2Fstrong%3E%20Investcorp%2C%20Liberty%20City%20Ventures%2C%20Fatima%20Gobi%20Ventures%2C%20Primal%20Capital%2C%20Wealthwell%20Ventures%2C%20FHS%20Capital%2C%20VN2%20Capital%2C%20local%20family%20offices%3C%2Fp%3E%0A
KEY%20DATES%20IN%20AMAZON'S%20HISTORY
%3Cp%3E%3Cstrong%3EJuly%205%2C%201994%3A%3C%2Fstrong%3E%20Jeff%20Bezos%20founds%20Cadabra%20Inc%2C%20which%20would%20later%20be%20renamed%20to%20Amazon.com%2C%20because%20his%20lawyer%20misheard%20the%20name%20as%20'cadaver'.%20In%20its%20earliest%20days%2C%20the%20bookstore%20operated%20out%20of%20a%20rented%20garage%20in%20Bellevue%2C%20Washington%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EJuly%2016%2C%201995%3A%3C%2Fstrong%3E%20Amazon%20formally%20opens%20as%20an%20online%20bookseller.%20%3Cem%3EFluid%20Concepts%20and%20Creative%20Analogies%3A%20Computer%20Models%20of%20the%20Fundamental%20Mechanisms%20of%20Thought%3C%2Fem%3E%20becomes%20the%20first%20item%20sold%20on%20Amazon%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E1997%3A%3C%2Fstrong%3E%20Amazon%20goes%20public%20at%20%2418%20a%20share%2C%20which%20has%20grown%20about%201%2C000%20per%20cent%20at%20present.%20Its%20highest%20closing%20price%20was%20%24197.85%20on%20June%2027%2C%202024%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E1998%3A%3C%2Fstrong%3E%20Amazon%20acquires%20IMDb%2C%20its%20first%20major%20acquisition.%20It%20also%20starts%20selling%20CDs%20and%20DVDs%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2000%3A%3C%2Fstrong%3E%20Amazon%20Marketplace%20opens%2C%20allowing%20people%20to%20sell%20items%20on%20the%20website%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2002%3A%3C%2Fstrong%3E%20Amazon%20forms%20what%20would%20become%20Amazon%20Web%20Services%2C%20opening%20the%20Amazon.com%20platform%20to%20all%20developers.%20The%20cloud%20unit%20would%20follow%20in%202006%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2003%3A%3C%2Fstrong%3E%20Amazon%20turns%20in%20an%20annual%20profit%20of%20%2475%20million%2C%20the%20first%20time%20it%20ended%20a%20year%20in%20the%20black%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2005%3A%3C%2Fstrong%3E%20Amazon%20Prime%20is%20introduced%2C%20its%20first-ever%20subscription%20service%20that%20offered%20US%20customers%20free%20two-day%20shipping%20for%20%2479%20a%20year%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2006%3A%3C%2Fstrong%3E%20Amazon%20Unbox%20is%20unveiled%2C%20the%20company's%20video%20service%20that%20would%20later%20morph%20into%20Amazon%20Instant%20Video%20and%2C%20ultimately%2C%20Amazon%20Video%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2007%3A%3C%2Fstrong%3E%20Amazon's%20first%20hardware%20product%2C%20the%20Kindle%20e-reader%2C%20is%20introduced%3B%20the%20Fire%20TV%20and%20Fire%20Phone%20would%20come%20in%202014.%20Grocery%20service%20Amazon%20Fresh%20is%20also%20started%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2009%3A%3C%2Fstrong%3E%20Amazon%20introduces%20Amazon%20Basics%2C%20its%20in-house%20label%20for%20a%20variety%20of%20products%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2010%3A%3C%2Fstrong%3E%20The%20foundations%20for%20Amazon%20Studios%20were%20laid.%20Its%20first%20original%20streaming%20content%20debuted%20in%202013%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2011%3A%3C%2Fstrong%3E%20The%20Amazon%20Appstore%20for%20Google's%20Android%20is%20launched.%20It%20is%20still%20unavailable%20on%20Apple's%20iOS%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2014%3A%3C%2Fstrong%3E%20The%20Amazon%20Echo%20is%20launched%2C%20a%20speaker%20that%20acts%20as%20a%20personal%20digital%20assistant%20powered%20by%20Alexa%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2017%3A%3C%2Fstrong%3E%20Amazon%20acquires%20Whole%20Foods%20for%20%2413.7%20billion%2C%20its%20biggest%20acquisition%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3E2018%3A%3C%2Fstrong%3E%20Amazon's%20market%20cap%20briefly%20crosses%20the%20%241%20trillion%20mark%2C%20making%20it%2C%20at%20the%20time%2C%20only%20the%20third%20company%20to%20achieve%20that%20milestone%3C%2Fp%3E%0A
Real estate tokenisation project

Dubai launched the pilot phase of its real estate tokenisation project last month.

The initiative focuses on converting real estate assets into digital tokens recorded on blockchain technology and helps in streamlining the process of buying, selling and investing, the Dubai Land Department said.

Dubai’s real estate tokenisation market is projected to reach Dh60 billion ($16.33 billion) by 2033, representing 7 per cent of the emirate’s total property transactions, according to the DLD.

COMPANY PROFILE
Name: Kumulus Water
 
Started: 2021
 
Founders: Iheb Triki and Mohamed Ali Abid
 
Based: Tunisia 
 
Sector: Water technology 
 
Number of staff: 22 
 
Investment raised: $4 million 
Red flags
  • Promises of high, fixed or 'guaranteed' returns.
  • Unregulated structured products or complex investments often used to bypass traditional safeguards.
  • Lack of clear information, vague language, no access to audited financials.
  • Overseas companies targeting investors in other jurisdictions - this can make legal recovery difficult.
  • Hard-selling tactics - creating urgency, offering 'exclusive' deals.

Courtesy: Carol Glynn, founder of Conscious Finance Coaching

Results:

Men's wheelchair 800m T34: 1. Walid Ktila (TUN) 1.44.79; 2. Mohammed Al Hammadi (UAE) 1.45.88; 3. Isaac Towers (GBR) 1.46.46.

Analysis

Members of Syria's Alawite minority community face threat in their heartland after one of the deadliest days in country’s recent history. Read more

The%20specs%3A%202024%20Mercedes%20E200
%3Cp%3E%3Cstrong%3EEngine%3A%20%3C%2Fstrong%3E2.0-litre%20four-cyl%20turbo%20%2B%20mild%20hybrid%0D%3Cbr%3E%3Cstrong%3EPower%3A%20%3C%2Fstrong%3E204hp%20at%205%2C800rpm%20%2B23hp%20hybrid%20boost%0D%3Cbr%3E%3Cstrong%3ETorque%3A%20%3C%2Fstrong%3E320Nm%20at%201%2C800rpm%20%2B205Nm%20hybrid%20boost%0D%3Cbr%3E%3Cstrong%3ETransmission%3A%20%3C%2Fstrong%3E9-speed%20auto%0D%3Cbr%3E%3Cstrong%3EFuel%20consumption%3A%20%3C%2Fstrong%3E7.3L%2F100km%0D%3Cbr%3E%3Cstrong%3EOn%20sale%3A%20%3C%2Fstrong%3ENovember%2FDecember%0D%3Cbr%3E%3Cstrong%3EPrice%3A%20%3C%2Fstrong%3EFrom%20Dh205%2C000%20(estimate)%3C%2Fp%3E%0A
TOP%2010%20MOST%20POLLUTED%20CITIES
%3Cp%3E1.%20Bhiwadi%2C%20India%0D%3Cbr%3E2.%20Ghaziabad%2C%20India%0D%3Cbr%3E3.%20Hotan%2C%20China%0D%3Cbr%3E4.%20Delhi%2C%20India%0D%3Cbr%3E5.%20Jaunpur%2C%20India%0D%3Cbr%3E6.%20Faisalabad%2C%20Pakistan%0D%3Cbr%3E7.%20Noida%2C%20India%0D%3Cbr%3E8.%20Bahawalpur%2C%20Pakistan%0D%3Cbr%3E9.%20Peshawar%2C%20Pakistan%0D%3Cbr%3E10.%20Bagpat%2C%20India%3C%2Fp%3E%0A%3Cp%3E%3Cem%3ESource%3A%20IQAir%3C%2Fem%3E%3C%2Fp%3E%0A
GIANT REVIEW

Starring: Amir El-Masry, Pierce Brosnan

Director: Athale

Rating: 4/5

EA Sports FC 26

Publisher: EA Sports

Consoles: PC, PlayStation 4/5, Xbox Series X/S

Rating: 3/5

Ukraine%20exports
%3Cp%3EPresident%20Volodymyr%20Zelenskyy%20has%20overseen%20grain%20being%20loaded%20for%20export%20onto%20a%20Turkish%20ship%20following%20a%20deal%20with%20Russia%20brokered%20by%20the%20UN%20and%20Turkey.%3Cbr%3E%22The%20first%20vessel%2C%20the%20first%20ship%20is%20being%20loaded%20since%20the%20beginning%20of%20the%20war.%20This%20is%20a%20Turkish%20vessel%2C%22%20Zelensky%20said%2C%20adding%20exports%20could%20start%20in%20%22the%20coming%20days%22%20under%20the%20plan%20aimed%20at%20getting%20millions%20of%20tonnes%20of%20Ukrainian%20grain%20stranded%20by%20Russia's%20naval%20blockade%20to%20world%20markets.%3Cbr%3E%22Our%20side%20is%20fully%20prepared%2C%22%20he%20said.%20%22We%20sent%20all%20the%20signals%20to%20our%20partners%20--%20the%20UN%20and%20Turkey%2C%20and%20our%20military%20guarantees%20the%20security%20situation.%22%3C%2Fp%3E%0A
The specs: 2018 Range Rover Velar R-Dynamic HSE

Price, base / as tested: Dh263,235 / Dh420,000

Engine: 3.0-litre supercharged V6

Power 375hp @ 6,500rpm

Torque: 450Nm @ 3,500rpm

Transmission: Eight-speed automatic

Fuel consumption, combined: 9.4L / 100kms

BMW M5 specs

Engine: 4.4-litre twin-turbo V-8 petrol enging with additional electric motor

Power: 727hp

Torque: 1,000Nm

Transmission: 8-speed auto

Fuel consumption: 10.6L/100km

On sale: Now

Price: From Dh650,000

HIJRA

Starring: Lamar Faden, Khairiah Nathmy, Nawaf Al-Dhufairy

Director: Shahad Ameen

Rating: 3/5

Specs
Engine: Electric motor generating 54.2kWh (Cooper SE and Aceman SE), 64.6kW (Countryman All4 SE)
Power: 218hp (Cooper and Aceman), 313hp (Countryman)
Torque: 330Nm (Cooper and Aceman), 494Nm (Countryman)
On sale: Now
Price: From Dh158,000 (Cooper), Dh168,000 (Aceman), Dh190,000 (Countryman)
UPI facts

More than 2.2 million Indian tourists arrived in UAE in 2023
More than 3.5 million Indians reside in UAE
Indian tourists can make purchases in UAE using rupee accounts in India through QR-code-based UPI real-time payment systems
Indian residents in UAE can use their non-resident NRO and NRE accounts held in Indian banks linked to a UAE mobile number for UPI transactions

PROFILE

Name: Enhance Fitness 

Year started: 2018 

Based: UAE 

Employees: 200 

Amount raised: $3m 

Investors: Global Ventures and angel investors 

The specs

Engine: 2.0-litre 4cyl turbo

Power: 261hp at 5,500rpm

Torque: 405Nm at 1,750-3,500rpm

Transmission: 9-speed auto

Fuel consumption: 6.9L/100km

On sale: Now

Price: From Dh117,059

PRISCILLA
%3Cp%3EDirector%3A%20Sofia%20Coppola%3C%2Fp%3E%0A%3Cp%3EStarring%3A%20Cailee%20Spaeny%2C%20Jacob%20Elordi%3C%2Fp%3E%0A%3Cp%3ERating%3A%203%2F5%3C%2Fp%3E%0A
Updated: June 19, 2025, 12:48 PM