WhatsApp notifies hundreds of users who installed a fake app that was actually government spyware

WhatsApp has recently reached out to approximately 200 users who fell victim to a deceptive version of its messaging application that harbored government spyware. The company has accused the Italian spyware manufacturer SIO of developing this fraudulent app designed for iPhones, as disclosed in a statement shared with TechCrunch. According to WhatsApp, their security team proactively identified these users, primarily located in Italy, who might have inadvertently downloaded the malicious app. In their statement, WhatsApp noted, "We have logged them out, informed them about the potential risks to their privacy and security associated with such unofficial clients, and advised them to uninstall it and revert to the legitimate WhatsApp application." Margarita Franklin, a spokesperson for WhatsApp, mentioned to TechCrunch that the company is currently unable to divulge specific details about the affected users, such as whether they include journalists or civil society members. She emphasized, "Our priority has been to protect those users who may have been misled into downloading this counterfeit iOS app." In addition, WhatsApp indicated its intentions to issue a formal legal notice aimed at halting any further malicious activities from the spyware firm. This news was first reported by the Italian newspaper La Repubblica and the news agency ANSA. Last year, TechCrunch uncovered that SIO was linked to a series of harmful Android applications embedded with its spyware, including counterfeit versions of WhatsApp and phony customer support tools for mobile providers. The spyware, identified as Spyrtacus, was discovered within the code of these applications. Using fake applications to surveil targets is a common method employed by authorities in Italy, often in collaboration with mobile service providers who disseminate phishing links on behalf of law enforcement. SIO develops government spyware through its subsidiary, ASIGINT. Neither Apple nor SIO has responded to requests for comments. This latest alert from WhatsApp follows a year after the company informed around 90 users of potential targeting by spyware from the U.S.-Israeli surveillance technology firm Paragon Solutions. This earlier incident particularly affected journalists and pro-immigration activists, resulting in a significant scandal in Italy. In the aftermath, Paragon Solutions severed its ties with Italy's intelligence agencies, which had been its clients.