WhatsApp's design allows attackers to infer limited metadata about users—such as whether someone is online or when they were last active—without needing to know or message them first, potentially enabling targeted social engineering or harassment campaign
Read the full article: https://www.darkreading.com/endpoint-security/whatsapp-leaks-user-metadata