Doha – Morocco’s General Directorate of Information Systems Security (DGSSI) issued a security bulletin warning citizens about a critical vulnerability in WhatsApp’s Windows application that could allow remote attackers to execute malicious code.
The security flaw, tracked as CVE-2025-30401, affects all WhatsApp versions prior to 2.2450.6 on Windows operating systems, according to the bulletin released by the Center for Monitoring, Detection and Response to Computer Attacks.
Meta, WhatsApp’s parent company, acknowledged the vulnerability in its security advisory, stating that “a maliciously crafted mismatch could have caused the recipient to inadvertently execute arbitrary code rather than view the attachment when manually opening the attachment inside WhatsApp.”
The DGSSI has urged all Moroccan users to immediately update their WhatsApp applications by referring to Meta’s security bulletin and installing the necessary patches.
Issued amid rising cybersecurity threats, the warning follows a wave of cyberattacks on Moroccan government platforms that exposed sensitive data and compromised digital infrastructure.
In a separate advisory, the DGSSI also cautioned about a critical vulnerability affecting WordPress websites using the “SureTriggers” plugin versions prior to 1.0.79, documented under vulnerability identifier CVE-2025-3102.
The country has faced an increasingly unstable cybersecurity environment in recent days, with the National Social Security Fund (CNSS) suffering a major breach.
The Algerian hacking group “JabaRoot DZ” claimed responsibility for the attack, which reportedly resulted in the exposure of salary information of 2 million individuals across 500,000 companies.
This incident was followed by a series of retaliatory attacks, including distributed denial-of-service (DDoS) campaigns.
Most recently, the Algerian group DDOS54 launched what they described as a “major campaign” against Moroccan government systems, affecting several ministerial websites, including the Ministry of Agriculture’s portal and the national tax portal Tax.gov.ma.
Addressing the WhatsApp vulnerability, security consultants described it as “a particularly nasty vulnerability for the everyday user,” noting that it could be exploited for data theft, malware deployment, account hijacking, identity theft, or virtually any action a malicious actor chooses to carry out.
The DGSSI’s latest warnings reflect an ongoing national effort to monitor digital vulnerabilities and protect users against the rising tide of cyberattacks targeting Moroccan institutions and citizens.
Read also: Moroccan Authorities Warn of Unauthorised Use of Personal Data Following CNSS Leak
