UAE: Emirates NBD Alerts Customers to WhatsApp Zero-Day Voice Call Exploit

Bank warns that a single call could compromise phones without user interaction

Emirates NBD has issued an urgent alert to customers across the UAE regarding a WhatsApp zero-day vulnerability. According to the advisory, attackers can exploit the flaw through voice calls alone, without requiring users to answer or interact with the call.

As mobile platforms become central to daily communication, attackers increasingly target trusted applications. Therefore, vulnerabilities in widely used apps create immediate and widespread risk.

How the Exploit Works

The vulnerability allows attackers to trigger malicious activity by placing a specially crafted WhatsApp voice call. Once the exploit activates, attackers may gain unauthorized access to sensitive data stored on the device.

Because the attack does not rely on links, downloads, or user actions, traditional warning signs may not appear. As a result, users may remain unaware that their device is compromised.

Potential Impact

If attackers successfully exploit the vulnerability, they may:

• Access private messages and call history
• Extract photos, documents, and stored files
• Monitor device activity in the background
• Use compromised phones for fraud or follow-on attacks

Consequently, personal devices used for work may also expose corporate email, applications, and credentials.

Why This Matters in the UAE

WhatsApp remains one of the most widely used communication platforms in the UAE. Therefore, vulnerabilities affecting the app expose a broad population, including individuals, employees, and organizations.

Meanwhile, banks and financial institutions issue such advisories to reduce fraud, prevent account takeover attempts, and limit downstream financial losses.

Recommended Protective Measures

To reduce risk, users should:

• Update WhatsApp and mobile operating systems immediately
• Avoid engaging with unknown or suspicious calls
• Enable automatic updates on all devices
• Use strong device locks and biometric authentication
• Monitor accounts regularly for unusual activity

Additionally, timely updates remain one of the most effective defenses once patches become available.

Key Takeaway

This incident highlights a critical shift in cyber threats. Attacks no longer depend on user mistakes alone. Instead, they increasingly exploit application-level flaws that operate silently.

Therefore, protecting mobile devices now plays a vital role in overall digital security.