A malicious Israeli-made virus that targets WhatsApp has meant that many around the world and in India including journalists, lawyers and activists have had their smartphones targeted, with all information vulnerable and accessible to someone. The question is who is that someone. WhatsApp says the Israeli company supplies this spyware to governments to check terrorism and crime but the government of India says they have nothing to do with the breach. But if that is the case, then how is it that those whose WhatsApp devices were tapped were activists and lawyers linked with the Bhima Koregaon case and, as importantly, how secure is your smartphone and mine?