WhatsApp chats not as secret as you think

Bas Bosschert has described a process by which the chat database can be read even if it's encrypted.

For Bosschert's attack to work, all that's required is that the user grants sufficient permissions to the malicious app. As he writes: “ since [the] majority of the people allows everything on their Android device, this is not much of a problem.”