WhatsApp mod with spyware module targets over 340k users, mostly in Arabic and Azeri languages

A new malicious WhatsApp mod that also works on Telegram has been discovered by Kaspersky researchers. The mod claims to offer extra features for the popular messaging apps, but it also secretly collects personal data from the users. The malware has infected over 340,000 devices in just one month, mainly targeting users who speak Arabic and Azeri. The most affected countries are Azerbaijan, Saudi Arabia, Yemen, Turkey, and Egypt. WhatsApp mods are unofficial versions of the app that add some functionality that the original app does not have. However, some of these mods also contain hidden spyware that can compromise the user’s privacy and security. Kaspersky has detected a new WhatsApp mod that has a malicious spyware module that can steal information from the device. The spyware module is activated by a service and a broadcast receiver that are not present in the original WhatsApp app. The receiver starts the service when the phone is turned on or plugged in. The service then sends a request to the attacker’s server with the device information, such as IMEI, phone number, country and network codes, and more. It also uploads the user’s contacts and account details every five minutes and can record
Read More