Researchers announced that multiple third-party WhatsApp apps were discovered that stole legitimate WhatsApp user access keys. With these keys, application authors can perform all kinds of malicious attacks.
Cybersecurity researchers from Kaspersky recently discovered two messaging apps for Android that are clearly targeting WhatsApp users. One is called YoWhatsApp and the other is called WhatsApp Plus. Both of these apps have almost the same functionality as the real WhatsApp app. According to the report, YoWhatsApp also comes with a customizable interface and individual chat room.
What users don’t see, however, is that these apps steal legitimate WhatsApp’s access keys and send them to fake authors, allowing attackers to gain access to victims’ user accounts.
According to Kaspersky, keys can be used in open source utilities and allow attackers to perform various actions without the user’s consent. Besides actions, attackers can eavesdrop on conversations and steal identities.
The researchers also say that attackers can use this access to subscribing to premium services, charging victims in the process and earning revenue. The apps are advertised through several legitimate Android apps, and Kaspersky suspects the developers didn’t know they were being used to advertise malware. Since then, the authors have been notified and these distribution channels are expected to be shut down soon. However, users who download these apps will be at risk as long as the apps are installed.
46916
