Fake WhatsApp app tricks more than a million people into downloading it
The convincing impostor even appeared to have been developed by the creators of the real messaging program
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.Over a million people have been tricked into downloading a fake version of WhatsApp.
The app, called “Update WhatsApp Messenger”, had been disguised to look just like the real deal.
However, all it actually did was bombard users with ads and try to get them to install another dodgy program.
Apart from having a slightly different name to the actual version of – WhatsApp which is listed as “WhatsApp Messenger” in the Google Play store – Update WhatsApp Messenger looked very convincing.
As noted by the Reddit user who first spotted it, it used the official WhatsApp logo and had a high user rating of 4.2 stars.
What’s more, it even appeared to have been developed by WhatsApp Inc., the creators of the real WhatsApp app.
According to Hacker News, the people behind the fake app managed to pull off this trick by adding an invisible Unicode character space to the end of the name, which in computer code reads “WhatsApp+Inc%C2%A0”.
The app has now been taken down by Google, but dextersgenius, a Reddit user who downloaded it while it was still available, has described what it did.
“The app itself has minimal permissions (internet access) but it's basically an ad-loaded wrapper which has some code to download a second apk, also called ‘whatsapp.apk’,” he said.
“The app also tries to hide itself by not having a title and having a blank icon.”
The fact that over a million people managed to download it before it was taken down is a cause for concern.
Google is supposed to protect Android users by blocking fake and malicious apps from the Play store, and it’s clear that the company’s security system isn’t foolproof.
Last week, another fake WhatsApp app made it onto Google Play, masquerading as the upcoming Business app.
Join our commenting forum
Join thought-provoking conversations, follow other Independent readers and see their replies
Comments