Beware! Fake WhatsApp called YoWhatsApp stealing users’ data; stay safe this way

tech.hindustantimes.com:

WhatsApp, the instant messaging app is a go-to app for texting, calling, video calling, education, business purposes and much more. Its growing popularity has made it a hotbed for cyber criminals. Recently, a fake WhatsApp look-alike app named YoWhatsApp has popped up on the internet that is scamming users by tricking them into using fake versions of the app riddled with malware. It allows hackers to compromise users' accounts and steal their information. YoWhatsApp is a fully working messenger app that asks the same permissions as the standard WhatsApp app including accessing SMS. The permissions are even granted to the Triada Trojan that's embedded in the app. The malicious app is promoted through advertisements on popular Android applications like Snaptube and Vidmate.

The app even lets users customize the interface or block access to chats, attracting users to install it. The YoWhatsApp campaign was first detected by security researchers at Kaspersky. The scary thing about this app is stealing WhatsApp's access keys and allowing attackers to perform various actions without the user's consent. Besides that the attackers can also eavesdrop on the conversations, steal identity data, and much more.

Further, it can even allow users to subscribe the victims to premium services, making them pay out money without their notice.

That's not all, the researchers have found another YoWhatsApp clone named "WhatsApp Plus," having the same malicious functionality. The app is being spread via the VidMate app. A few months back, Will Cathcart, Head of WhatsApp at Meta, has also warned users against using this fake WhatsApp that can compromise users' data on their phones. He tweeted, “Recently our security team discovered hidden malware