In accordance with Bleeping Computer, μια νέα έκδοση μιας ανεπίσημης εφαρμογής WhatsApp Android με την ονομασία “YoWhatsApp” βρέθηκε να κλέβει κλειδιά πρόσβασης για λογαριασμούς χρηστών.
YoWhatsApp is a fully functional messenger app that uses the same permissions as the standard WhatsApp app and is promoted through ads on popular Android apps like Snaptube and Vidmate.
The app includes plugins characteristics compared to regular WhatsApp, such as the ability to customize the interface or block access to chats, making it tempting for users to install it. However, it has now been revealed that YoWhatsApp v2.22.11.75 grabs WhatsApp keys, allowing fraudsters to control user accounts.
Jake Moore, Global Cyber Security Consultant at ESET says:
“Fake apps appear on stores applications for years. And, unfortunately, it is not new to see an app that copies the original app to lure people with “extra features” that might convince users to go for it.
However, using this unofficial app can damage users' official accounts or even give fraudsters access to those accounts. Account hijacking and loss of sensitive or personal data is a worrying phenomenon as it leads to further targeted attacks.
It is strongly recommended to avoid alternative applications like this one, however, young people, who may be targeted with λήψη αυτών των εφαρμογών, μπορεί να μην έχουν επίγνωση των κινδύνων. Ακόμα χειρότερο είναι όταν δεν νοιάζονται για τους κινδύνους, οπότε οι συμβουλές ευαισθητοποίησης πρέπει να δίνονται με προσοχή από άλλους συνομήλικους αλλά και από πλατφόρμες στις οποίες συχνάζουν”.
