WhatsApp said it has notified around 200 users who were tricked into installing a malicious fake version of the chat app that contained government spyware.
WhatsApp has accused Italian spyware maker SIO of creating a fake version of its iPhone messaging app, according to an announcement shared by the company with TechCrunch.
“Our security team has proactively identified approximately 200 users, primarily in Italy, who we believe may have downloaded this malicious unofficial client,” WhatsApp said in a statement. “We logged them out, warned them of the privacy and security risks associated with downloading a fake unofficial client, and encouraged them to delete it and download the official WhatsApp app.”
WhatsApp spokesperson Margarita Franklin told TechCrunch that at this time the company cannot share further information about the users who notified them, including whether they are journalists or members of civil society.
“Our priority is to protect users who may have been tricked into downloading this fake iOS app,” Franklin said.
WhatsApp also said in its announcement that it plans to “send a formal legal request to this spyware company to stop such malicious activities.”
Screenshot of the notification sent by Whatsapp to users warning them to download the official app. (Image: whatsapp)
Italian newspaper La Repubblica and news agency ANSA first reported the news.
Last year, TechCrunch revealed that SIO was behind a series of malicious Android apps containing the company's spyware, including fake versions of WhatsApp and fake customer support tools for mobile phone providers. SIO's spyware was identified by the name Spyrtacus, a word that appears in the spyware's code.
Contact Us Want more information about SIO or other government spyware manufacturers? You can contact Lorenzo Franceschi-Bicchierai securely from your non-work device on Signal (+1 917 257 1382), Telegram, Keybase and Wire @lorenzofb, or email.
The use of fake apps against targets of surveillance is a well-established tactic used by Italian authorities, often with the cooperation of mobile phone providers, who send phishing links to customers on behalf of law enforcement.
SIO develops government spyware through its subsidiary ASIGINT.
Apple and SIO did not respond to requests for comment.
WhatsApp's latest announcement comes a year after the company warned about 90 users that they had been targeted by spyware made by U.S.-Israeli surveillance technology maker Paragon Solutions. WhatsApp sent these notices to journalists, pro-immigration activists and others, sparking a widespread scandal across Italy.
In response, Paragon severed ties with its client, the Italian spy agency.