Fake WhatsApp named “YoWhatsApp” stealing users’ personal data
A fake version of WhatsApp that is circulating is stealing user accounts and personal information from thousands of users. Analysts at the cybersecurity firm Kaspersky shared the report.
YoWhatsApp, a fully functional chat application that steals user account access keys, is the name of this unofficial variant. It even makes use of the same permissions as the regular WhatsApp and advertises via advertising on other pirate applications like Snaptube and Vidmate.
YoWhatsApp, in contrast to the original WhatsApp, allows you to link two mobile numbers to a single account and includes added features including anonymous texting, the option to view deleted messages, and password-protecting chats.
The newest version of YoWhatsApp (v2.22.11.75) is stealing WhatsApp keys, which enables attackers to take over your account, according to Kaspersky experts. The developer’s remote server receives these stolen WhatsApp keys.
These keys can be used in open-source tools to establish connections and carry out user-like tasks without an actual client.
Although it is unknown whether these keys have been used in any recent assaults, they are nevertheless a cause for concern because they could result in account takeovers, data leaks, impersonation of close friends, and other things.
The Triada Trojan is installed in the app, creating an accessible backdoor. It can sign you up for paid subscriptions without your awareness by taking advantage of app permissions.
Fake WhatsApp named “YoWhatsApp” stealing users’ personal data
There are further fake WhatsApp versions available, one of which goes by the name of “WhatsApp Plus.” The same nefarious features, including account stealing, are included.
Fortunately, neither of these apps is offered on the Google Play Store, thus as of this writing, most users shouldn’t be harmed by them.
#Security researchers have detected a threat actor distributing a data-stealing mobile #Trojan via a spoofed version of #YoWhatsApp, a relatively widely used, modified version of the #WhatsApp messaging application. #CyberSecurity #HackerNews
Read: https://t.co/McH5GOctVW
— 3ackd0or (@3ackd0or) October 13, 2022
