WhatsApp, the messaging app used by more than 1.5 billion worldwide, says it’s patched a critical security vulnerability which allowed attackers to secretly infect phones with malicious spyware by just calling phone numbers over an in-app audio call. The Facebook-owned company said the attack targeted a “select number” of users, and was orchestrated by “an advanced cyber actor,” according a statement from a WhatsApp spokesperson.