Knock-off WhatsApp on Android uses malware to steal your account — delete it now

Malicious WhatsApp mods on Android have been discovered using malware to take over users’ accounts, allowing hackers to impersonate victims, send spam, and even set up paid subscriptions.

Spotted by cybersecurity experts Kaspersky, knock-off messaging apps of the popular messaging platform, including “YoWhatsApp” and “Whatsapp Plus,” used malicious code in a new version of their dedicated apps in a known malware labeled Triada Trojan.

In YoWhatsApp version, a malicious module allows the app to steal keys for the legitimate WhatsApp, giving threat actors the ability to take over a user’s account. As the report points out, these keys also allow the use of a WhatsApp account without actually having the app. 

(Image credit: Kaspersky )

YoWhatsApp asks for the same permissions as WhatsApp, including access to SMS, meaning the same permissions are then granted to the Triada Trojan malware. The cybercriminals can then take control of the account, with the user losing access, to send messages impersonating the user, send malicious spam, and set up paid subscriptions — generating a profit without the user’s knowledge.  

The unofficial apps are spread ads in popular apps such as Snaptube and Vidmate. YoWhatsApp is known to be a fully functioning messenger app, but adds different features from the official WhatsApp app including a customizable interface and blocking access to individual chats. Not all WhatsApp mods are malicious, but the ones discovered now contain malicious code.

The cybersecurity site notified Snaptube about the malicious app being pushed on its ad platform, meaning its distribution should stop soon. There aren’t any known victims the report specifies, but it’s a good idea to stay away from these apps.

Kaspersky had previously investigated this malware last year in another modified WhatsApp build called “FMWhatsApp.” Now, the code has been spotted in other Android apps.

Watch out for unofficial apps

Source link

We will be happy to hear your thoughts

Leave a reply

Enable registration in settings - general
Shopping cart