logo

WhatsApp warns users of fake app used to distribute spyware

ID: 9499af48-f53b-5ac7-9235-da3f33d84e1c

STIX ID: report--9499af48-f53b-5ac7-9235-da3f33d84e1c

Feed Name: The Record from Recorded Future News

Threat Score
70/100

Date Published: 2026-04-01

Date Updated: 2026-05-01

...
...

WhatsApp alerted approximately 200 users—primarily in Italy—that they had installed a fake iPhone WhatsApp client infected with spyware allegedly developed by Italian spyware maker SIO. The company emphasized the attack used highly targeted social engineering rather than exploiting a WhatsApp vulnerability, logged out the impacted accounts, and encouraged users to remove the unofficial app; the report ties this activity to a broader pattern of surveillance-for-hire vendors targeting journalists and human rights defenders.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.