A new spyware tool reportedly can harvest data from iOS devices and their connected cloud accounts.

The tool, called Pegasus, also works with Android devices. The data it is able to gather even reportedly includes encrypted messages from third-party apps. It does this by fraudulently posing as the user to download their private content.

WhatsApp users must update to the latest version of the app to avoid be infected by malicious software.

A security flaw in the popular messaging client allows the Pegasus spyware to be installed on your smartphone. WhatsApp is investigating the situation and urges its 1.5 billion users to update.