07 Apr Fake WhatsApp Harvests Info from User’s Device
Malwarebytes researcher Nathan Collier recently revealed that a fake WhatsApp version is being circulated and used by attackers to collect sensitive information such as photos, phone numbers from Android mobile phones.
The app, called WhatsApp Plus, is a variant of the Android/PUP.Riskware.Wtaspin.GB riskware identified in 2017. The app features a different install screen which directs the user to download the latest version from the developer’s website written in Arabic.
Collier advised users to always download the app from Google Play as it offers significantly less risk compared to third-party sources.
Source: MalwareBytes