Fake WhatsApp Spyware App Exposes Hundreds of Users, Company Issues Urgent Warning

WhatsApp warns users after fake app with spyware targeted hundreds, urging downloads only from official sources to avoid serious privacy risks.

In a fresh cybersecurity concern, WhatsApp has alerted nearly 200 users who were tricked into installing a fake version of its messaging app embedded with spyware. The malicious software, reportedly developed by Italian spyware firm SIO, primarily affected iPhone users, raising serious questions app authenticity and digital safety.

According to a statement shared with TechCrunch, WhatsApp’s internal security team identified the compromised accounts and took immediate action. “Our security team proactively identified around 200 users primarily in Italy who we believe may have downloaded this malicious unofficial client,” WhatsApp said in its statement. “We have logged them out, alerted [them] to the risks to their privacy and security that come with downloading fake unofficial clients, and encouraged them to remove it and download the official WhatsApp app.”

While the company has not disclosed the identities of those targeted, it confirmed that legal action has been initiated against SIO to halt further misuse of its platform. This incident highlights the growing sophistication of spyware campaigns and the increasing risks associated with downloading apps from unofficial sources.

This is not the first time SIO has been linked to such activities. Reports suggest the company has previously created multiple malicious Android applications, including fake messaging apps and counterfeit customer support tools designed to infiltrate user devices. The spyware associated with these campaigns has been identified under the name “Spyrtacus,” a term discovered within its codebase. SIO is also believed to develop surveillance tools through its subsidiary ASIGINT, often marketed for government use.

WhatsApp has faced similar threats in the past. Last year, the platform warned around 90 individuals, including journalists and pro-immigration activists, spyware attacks linked to Paragon Solutions. These repeated incidents underline the persistent targeting of high-risk individuals and groups by advanced surveillance technologies.

In response to such threats, WhatsApp continues to strengthen its security framework. The platform offers advanced privacy settings designed for users who may be at higher risk of cyberattacks. These features limit interactions with unknown contacts, tighten account controls, and enhance overall data protection.

The company also urges users to remain vigilant and only download apps from trusted sources such as official app stores. Installing unofficial versions not only compromises personal data but also exposes users to long-term security risks.

As spyware tactics evolve, this incident serves as a stark reminder that even widely trusted platforms can be exploited through deceptive means. Staying informed and cautious remains the first line of defense in an increasingly complex digital landscape.