Sale of a WhatsApp 0-day Exploit

For informational purposes only

Vulnerability type: Remote Code Execution via a private message Affected operating systems: WhatsApp mobile and desktop clients Price: $3K

The seller claims that the exploit can deliver malware to a victim's device via a regular WhatsApp message. According to the description, the trigger condition is minimal: the targeted user only needs to open the chat and view the message. It is worth noting that working exploits for software of this scale typically start at several hundred thousand dollars.

According to WhatsApp, as of September 2025, the service had more than 3 billion users across over 180 countries.

💬 Discuss