Back Ground.News

WhatsApp notifies hundreds of users who installed a fake app that was actually government spyware

Ground.News • April 1, 2026

The Meta-owned company said it identified around 200 users who were tricked into installing a fake version of WhatsApp that was actually Italian-made spyware.

"We will send formal warning." It is the Asigint-Sio, collaborates with Forces Order and Intelligence (ANSA)

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Italian Spyware Firm Targets WhatsApp Users with Fake App WhatsApp has alerted approximately 200 users, primarily in Italy, about a malicious version of its app that contained spyware developed by the Italian firm SIO. The fake app was distributed through deceptive means, tricking users into downloading it instead of the official version. WhatsApp's security team identified the affected users, logged them out of their accounts, and advised them to uninstall the counterfeit app. The spyware, named Spyrtacus, is designed to steal sensitive information from users' devices. This incident marks the second significant spyware exposure involving WhatsApp in 15 months, following a previous incident with Paragon Solutions. WhatsApp plans to take legal action against SIO to halt its malicious activities. The attack highlights the growing sophistication of social engineering tactics used by spyware vendors. Users are urged to only download applications from official sources to avoid similar threats. 39 sources 71

WhatsApp notifies hundreds of users who installed a fake app that was actually government spyware

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (2)

Platforms (1)