February 10, 2026, 12:26 pm | Read time: 2 minutes
A serious security vulnerability in WhatsApp was recently discovered. Attackers spread malware in groups, causing significant damage. A particular feature played a central role. That’s why we’re telling you how to disable automatic downloads in WhatsApp.
Malware in WhatsApp via Automatic Downloads
As Malwarebytes reports and Google’s Project Zero discovered, attackers specifically added their victims to WhatsApp groups. They then sent a malicious file in the group chat. Due to WhatsApp’s automatic downloads, this file was automatically downloaded to the smartphone. The issue primarily affected Android smartphones.
No prompt or warning appeared. The malware was already on the device without the owner’s active consent. The only requirement for the attack was knowing the victim’s phone number.
To activate the malware, another step was necessary, such as opening the file. Reports suggest psychological tricks, like a phone call, were also conceivable to prompt users.
WhatsApp Is Now Becoming a Malware Trap Here
Hackers Exploit Zero-Day Vulnerability in Microsoft Office for Attacks
Current Status of the Security Vulnerability
Meta had already released an update intended to close the vulnerability. Google initially rated this patch as incomplete. However, there is now a comprehensive fix. Users should not rely solely on updates but also take additional protective measures.
These Measures You Should Take for Protection
Disable Auto-Download in WhatsApp
- Open WhatsApp
- Go to Settings
- Tap on “Storage and Data”
- Under “Media Auto-Download,” uncheck all data types (on iOS: set all file types to “Never”)
Note: This setting also prevents images and videos from direct chats from being automatically saved on the device.
Prevent WhatsApp from Adding Data to the Gallery
- Open WhatsApp settings
- Tap on “Chats”
- Turn off the “Media Visibility” option (on iOS: turn off “Save to Photos”)
WhatsApp will continue to download certain data. However, it will no longer be automatically added to the gallery or shared with cloud services.
Restrict Who Can Add You to Groups
- Tap on “Privacy” in WhatsApp settings
- Select “Groups”
- Determine who can send group invitations
- Instead of the default “Everyone,” choose “My Contacts” or “My Contacts Except…”
- Mark contacts that are not trusted