WhatsApp has flagged a targeted spyware campaign after discovering that nearly 200 users were tricked into downloading a fake version of its app. The company said most affected users were based in Italy and had installed an unofficial client designed to mimic the original service.
WhatsApp has linked the operation to SIO, a surveillance technology company. The fake application allegedly carried spyware capable of infiltrating devices while appearing identical to the legitimate messaging platform.
The attackers used deceptive distribution methods that operated outside official app stores to launch their attack. The malicious application was installed by users who were tricked into believing its safety, which enabled the app to collect their private information, including chat records and contact details, and their device's entire data.
The security team of the company found compromised accounts through their active monitoring work and then proceeded to log out all users who had entered the fraudulent application. The organization issued alerts to notify users about the dangers of using unofficial clients, while it recommended that users remove the harmful software and install the legitimate product.
The spokesperson declared that their organization first needed to defend the affected users before they could establish better protections against future threats. WhatsApp also plans to file lawsuits to stop further misuse of spyware programs.
Also Read: Microsoft Raises Alarm Over WhatsApp Malware Exploiting User Trust
The incident shows how commercial spyware companies have become a more dangerous threat, with their cyberattack methods evolving into advanced techniques targeting regular people. The case shows a connection to an earlier Paragon Solutions case, which involved attacks against journalists and activists.
The latest development serves as a reminder for users to rely only on verified app sources and remain cautious of unofficial downloads that may compromise privacy.