Fake WhatsApp apps containing government spyware targeted your iPhone, but Meta’s security team caught the threat before it spread further. Around 200 users, primarily in Italy, downloaded a malicious fake iOS version of WhatsApp that contained surveillance software developed by Italian firm SIO. Your personal messages, contacts, and device data were at risk if you fell for this sophisticated phishing scheme.
WhatsApp Acts Fast to Protect Users
The company’s proactive response prevented wider distribution of the malicious app.
WhatsApp’s security team proactively identified the fake app, immediately logged out affected users, and sent urgent warnings about the privacy breach. The company urged victims to remove the counterfeit app and download the official version from Apple’s App Store. WhatsApp prioritized protecting users while declining to specify whether journalists or civil society members were among the targets.
SIO’s Growing Spyware Operations
The Italian firm operates surveillance tools through its subsidiary ASIGINT.
SIO, an Italian surveillance technology company that develops spyware for law enforcement and intelligence agencies through its subsidiary ASIGINT, has previously targeted Android users. The company operates digital surveillance tools that Italian authorities use for targeted monitoring. Think of it as the digital equivalent of wiretapping, except your entire phone becomes the bug.
How Italian Authorities Deploy Fake Apps
Mobile carriers often distribute phishing links that lead to compromised app installations.
The fake apps represent a common tactic by Italian law enforcement, often distributed through phishing links sent via mobile carriers. Users receive seemingly legitimate messages directing them to “update” or “reinstall” WhatsApp, leading to the compromised version. The news was first reported by Italian outlets La Repubblica and ANSA.
Protecting Yourself From App Store Imposters
Always verify app authenticity before downloading any messaging software.
- Always download apps directly from Apple’s App Store or Google Play Store, never through links in text messages or emails
- Check the developer name matches the official company before installing
- If you receive carrier messages about app updates, navigate to the app store independently rather than clicking provided links
WhatsApp plans to issue a formal legal demand against SIO to halt these surveillance activities, though neither Apple nor SIO responded to requests for comment.
