Critical warning from WhatsApp: Spyware trap for 200 users

WhatsApp announced that it notified approximately 200 users who were infected with spyware through a fake mobile application. In the statement made by the company, it was stated that this fake application, especially targeting iPhone users, was presented as an unofficial WhatsApp version and users were deceived in this way. In addition, it was stated that the incident in question largely affected users in Italy. The company announced that the detected users were logged out of their accounts and warned about security risks. Despite this, it seems that details about the scope of the incident are kept limited.

WhatsApp officials claimed that SIO, an Italian-based surveillance technology company, was behind the fake application. This claim led to renewed discussion of the company, which has been on the agenda with similar activities in the technology world before. In addition, it is known that the spyware developed by the company is used by government institutions. WhatsApp spokesperson Margarita Franklin stated that no further information about the identities or professions of the users is shared, and underlined that the priority is to ensure user security. Although the details are limited, the scope of the incident is considered remarkable.

Surveillance activities through fake applications are on the agenda again

Targeting users through fake applications stands out as one of the methods used for a long time, especially in state-sponsored surveillance activities. In addition, it is known that similar techniques were used in Italy in the past and phishing links were sent to users in cooperation with telecom operators. Such methods cause users to unknowingly install malicious software on their devices. On the other hand, it is stated that the spyware used in this incident may be related to the software called “Spyrtacus”, which was previously detected on the Android platform.

However, it is known that SIO develops surveillance solutions for states through its subsidiary ASIGINT. Past reports have revealed that the company collects data using fake customer service apps and imitations of popular messaging apps. Despite this, no official statement was made from the company or Apple on the subject. This situation brought the tension between technology companies and surveillance technology developers back to the agenda.

WhatsApp’s latest statement draws attention as the second major warning made after a similar incident. Last year, the company notified approximately 90 users who were targeted with spyware developed by US-Israel-based Paragon Solutions. It was stated that journalists and civil society representatives were among these users. Despite this, the developments show that security risks continue in the mobile application ecosystem.