WhatsApp has informed approximately 200 users who unknowingly installed a fake version of the app containing spyware. The company accused the Italian spyware manufacturer SIO of creating this counterfeit iPhone app, as stated in an announcement to TechCrunch.
“We proactively identified around 200 users, mainly in Italy, who may have downloaded this malicious unofficial client,” WhatsApp noted. “We’ve logged them out, warned them about the privacy and security risks of fake clients, and advised them to download the official app.”
WhatsApp spokesperson Margarita Franklin told TechCrunch they currently cannot disclose further details about the notified users.
“Our focus has been on protecting those tricked into the fake iOS app,” Franklin said.
WhatsApp also announced plans to issue a legal demand to halt such activities by the spyware firm.
Italian newspaper La Repubblica and ANSA news agency first reported this news.
TechCrunch reported last year that SIO was distributing malicious Android apps, including fake WhatsApp versions and fraudulent customer support tools with the spyware name Spyrtacus.
Using fake apps for surveillance is a common tactic in Italy, often in collaboration with cellphone providers who send phishing links for law enforcement.
SIO develops spyware through its subsidiary ASIGINT. Apple and SIO did not comment.
WhatsApp’s announcement follows a previous alert where 90 users were targeted by U.S.-Israeli Paragon Solutions’ spyware, leading to a scandal in Italy. Consequently, Paragon severed ties with Italian spy agencies, previously its clients.