A vulnerability in WhatsApp Messenger allows fraudulent groups or government organizations to track who users are messaging and their approximate locations, though the messages themselves remain encrypted. This was disclosed by developers in an internal security report.