We recently updated our post on WhatsApp tool poisoning, to include an attack setup that does not require a malicious MCP server.

It suffices to send you an injected message.

See: https://invariantlabs.ai/blog/whatsapp-mcp-exploited#experim...