Original artice on Forbes: http://www.forbes.com/sites/thomasbrewster/2016/09/29/winteg...

The link should be updated to point to this URL.

If this were any site other than Schneier we'd all be screaming "blogspam!".

> The link should be updated to point to this URL.

Some of us can't read the original because we don't want malware.

http://www.networkworld.com/article/3021113/security/forbes-...

Fortunately, there are precautions you can take, up to and including permanently disconnecting from the Internet.

Sounds like they just remotely root the device and then extract all data on it, with a special utility that can display the Whatsapp database in a neat way.

If they can install malware on the device, wouldn't it be easier to use something like the accessibility features of Android to just scrape the content or maybe take Screenshots, send them home and use OCR?

The WhatsApp client is pretty forgiving about key changes. Is the attack just hoping the user ignores the notification?