WhatsApp has notified approximately 200 users who fell for a malicious version of the messaging app. The counterfeit app, designed by Italian spyware maker SIO for iPhones, contained spyware. WhatsApp’s security team identified these users, mainly from Italy, who downloaded the fake app. The affected users have been logged out and informed of the risks associated with using unofficial clients. WhatsApp has advised them to uninstall the malicious app and switch to the official version.
The targeted users have not been disclosed by WhatsApp, but the company has taken legal action against the spyware firm to halt its illicit activities. SIO has a history of creating harmful apps, including fake WhatsApp apps and unauthorized customer support tools for mobile service providers, as previously reported by TechCrunch.
SIO, operating through its subsidiary ASIGINT, is known for developing government spyware, with one of its spyware variants identified as Spyrtacus. This is not the first instance of WhatsApp users being targeted by spyware. Last year, the platform informed about 90 users of being targeted by spyware from U.S.-Israeli surveillance tech maker Paragon Solutions, with notifications sent to journalists and pro-immigration activists.
For users concerned about potential cyber-attacks, WhatsApp offers robust security settings covering messages, media, account security, profiles, and groups. These advanced security features apply strict privacy controls to reduce vulnerability to cyber threats. Users can restrict account settings, limit chats with unknown contacts, and enhance overall security settings. This feature is recommended for individuals facing heightened security risks and should be enabled accordingly.