3 ms·

I have a more clear event: At my company we regularly communicate single use credit card numbers for company purchases. One of those was sent via WhatsApp, and

I have a more clear event: At my company we regularly communicate single use credit card numbers for company purchases. One of those was sent via WhatsApp, and stolen. Neither the origin phone nor the destination phone were compromised. The card was used to purchase Adwords, the transaction originated in the US (we are in Europe). Our theory is that at least images on WhatsApp are human-reviewed, and one reviewer saw the credit card go through and took the opportunity. We reversed the transaction and switched to Signal...

rand49an 5y ago
How do you know the card wasn't compromised before it reached you?
- sergiosgc 5y ago
  It's a virtual card, generated in the banking app, to be used one single time. The card never existed outside the bank IT systems or the phones involved in the communication.
  - atatatat 5y ago
    > the bank IT systems Eh ...
throwaway67114 5y ago
At least on android, most whatsapp data is stored in a folder named whatsapp, which can be accessed by any app with storage permission. So you can see all sent/received images and videos in photo viewer apps etc. Signal stores them in a place which at least in Android 11 can't be accessed by other apps.