There is a fake version of WhatsApp that steals user accounts and personal information from thousands of people. Analysts at security company Kaspersky shared the report.
This unofficial version is called “YoWhatsApp” and is a fully functional messenger app that steals access keys to user accounts.
It even uses the same permissions as real WhatsApp and is advertised on other scam apps like Snaptube and Vidmate.
But unlike the original version of WhatsApp, YoWhatsApp lets you link two phone numbers to one account and has additional features like anonymous messaging, viewing deleted messages, and password-protected chats.
Kaspersky researchers found that YoWhatsApp v2.22.11.75 steals WhatsApp keys, allowing attackers to gain control of your account. Stolen keys for WhatsApp are sent to the developer’s server, which is far away.
It’s unclear if these keys have yet been used in an attack, but it’s still a concern because it could lead to account takeovers, data leaks, impersonation of close contacts, and more.
The Trida Trojan is built within the app itself, providing a backdoor for malicious actors to access the app at will. It can use app permissions to sign you up for paid subscriptions without your knowledge.
There are other fake versions of WhatsApp, such as “WhatsApp Plus.” It has the same malicious features that can be used to steal accounts etc.
Thankfully, none of these apps can be found in the Google Play Store, meaning they should be safe for the vast majority of users for now.
