Jump to content
  • entries
    35,857
  • comments
    14
  • views
    421,078

There’s A Fake WhatsApp App That Targets iPhone Users & Spies On Them For Personal Data


ADMIN

75 views

Fake versions of apps is a recurring problem for Android devices, however, now there’s a new fake WhatsApp application that targets iPhone users. The app was developed by an Italian surveillance company called ‘Cy4Gate’ and it was created to target specific individuals, according to a report. The app allowed hackers to get access to personal information by tricking them to install a configuration file on their iPhones. 

Fake WhatsApp Targets iPhone Users For Personal Data © aarn-giri--unsplash

The information that was gathered but not limited to included the Unique Device Identifier (UDID) as well as the International Mobile Equipment Identity (IMEI). WhatsApp has been previously exploited by Israeli NSO group that was used to target journalists and human rights activists in various countries including India. 

The fake version of WhatsApp was found by the cybersecurity research lab at the University of Toronto and Motherboard. The app was discovered after security company ZecOps tweeted with claims of detecting attacks against users in the instant messaging app. 

Fake WhatsApp Targets iPhone Users For Personal Data © bermix-studio-unsplash

It was found that a website with the domain config5-dati[.]com was tricking visitors to install the fake app and let their iPhone install a file that was designed to gather information. The file would then send back the stolen data to hackers. The link was also distributed via phishing websites that tricked users in installing the fake instant messaging app. The app looks quite real and identical to the original WhatsApp app, however it provided instructions to the users on how to install a file. 

Fake WhatsApp Targets iPhone Users For Personal Data © Reuters

It was later found that the domain name shared an IP address with Cy4Gate, a company that works with law agencies and the Italian government. Another set of domains were also discovered that were registered with  “cy4gate srl."

”We strongly oppose abuse from spyware companies, regardless of their clientele. Modifying WhatsApp to harm others violates our terms of service. We have and will continue to take action against such abuse, including in court,” the spokesperson said to Motherboard.

Source: Motherboard


View the full article

0 Comments


Recommended Comments

There are no comments to display.

Join the conversation

You are posting as a guest. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Add a comment...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...