The researchers at Kaspersky have come across a new virus that attacks WhatsApp users. Targeted at WhatsApp mod FMWhatsapp, the attacker is a Trojan virus called Triada that maliciously downloads on user’s devices and can allow for several aftermaths such as subscribing to several paid services and stealing user data.
WhatsApp is one of the most popular instant messaging services with a myriad of features. However, there is a tonne of WhatsApp mods that offer extended features such as WhatsApp Plus doesn’t let others delete sent messages and so on. Mods are popular among WhatsApp users as it brings more features but these apps are unofficial and thus, not trustworthy.
According to the antivirus giant, researchers spotted a Trojan virus on FMWhatsApp mod with version number 1*.80.0 wherein a malware called Trojan.AndroidOS.Triada.ef infects user devices once the user downloads the said mod. There is a variety of extra malware that affect different systems once the Trojan virus has infected the device.
The Trojan-Downloader.AndroidOS.Agent.ic is tasked with downloading and running malicious modules on the infected device. Similarly, Gapac.e is tasked with downloading and running malicious modules as well as can display full-screen ads to users. The MobOK.i extension is focused on signing up for paid subscriptions which will hamper your bank balance for sure.
There’s another module called Subscriber.l which signs up for paid services too. Finally, there’s a Whatreg.b module that infects the device, capture login confirmation text, and can use it to further perform several activities such as illegal trading and spam distribution.
The defense against such malware is to avoid downloading apps from unofficial sources be it APKPure or other platforms. Google Play Store scans for such malware and puts you in a greater position with security and privacy as opposed to downloading apps from unknown and unofficial sources. Sticking to official apps can be beneficial in the long run as third-party apps and mods are often powerful but lack robustness in terms of security and privacy aspects.
