WhatsApp mod hits African users

Tech Reporter

Researchers at Kaspersky have discovered a new malicious version of a WhatsApp messenger mod called YoWhatsApp.

Popular for having features the official app does not offer, this mod spreads the notorious Triada mobile trojan, which can download other trojans, issue paid subscriptions and even steal WhatsApp accounts.

Users around the world were affected by this threat in the last two months, 27% from the Middle East, Turkey and Africa (META) region.

This new malicious mod is advertised in the popular Snaptube app, also distributed via Vidmate.

There are many different ways to get up close and personal with the qualification of your dreams. Being able to have first-hand experience of a particular career can help you see if your chosen career is right for you. This includes research, job shadowing, internship, interviewing experts in a field of interest and networking on LinkedIn.

5. Earning capacity

Financial stability it is an important reality which must be considered when choosing your degree/diploma and career. The employment environment has become fluid, it is important to be clear on your chances of finding work once you graduate. Look through job advertisements or make an appointment with the Human Resources department at a relevant company.

Choosing the right career may not be easy, but these steps discussed can go a long way in helping you to settle on an option that can make you happy and assist in achieving your life goals. Always keep the big picture in mind - targeting where you want to be in the next 5 - 10 years to guide you in your journey of achieving fulfillment in your career.

WhatsApp is used by millions worldwide, but not all are satisfied with features the app offers. Some users download WhatsApp mods that give more options, such as custom backgrounds and more. However, such mods are not always secure.

Previously Kaspersky discovered another modification of WhatsApp, which also spreads the dangerous Triada mobile trojan. Researchers indicate that fraudsters continue to take advantage of the globally recognised messenger by creating malicious modifications, such as some versions of the so-called YoWhatsApp.

To infect as many users as possible, cybercriminals advertise the malicious YoWhatsApp mod in the popular Android app Snaptube, which is used to download videos from YouTube, Facebook and Instagram.

Since YoWhatsApp is being advertised in the Snaptube app used by hundreds of thousands around the world, many are not aware that this modification could be dangerous.

YoWhatsApp is also being distributed via the Vidmate app, which has an unofficial Android app store. Here attackers published a malicious version of YoWhatsApp called Whatsapp Plus. Since Vidmate is not an official app store, likelihood of malicious apps being distributed there increases, and Whatsapp plus, which infects with the Triada trojan, is an example.

To use the WhatsApp mod users need to log in to their account of the legitimate app. However, along with the new features, users also receive the Triada trojan. Having infected the victim, attackers download and run malicious payloads on their device, as well as get hold of the keys to their account on the official WhatsApp app. This gives them ability to steal accounts and get money from victims by signing them up for paid subscriptions they are not even aware of.

Security researcher Anton Kivva says users believe that if the application they are using is safe any advertising on it does not carry any risks.

“However this is not always the case, so we recommend that users download applications only from official app stores. They will not always carry the same large number of custom features, but they will definitely be much safer for you, reducing the possibility of losing your account or money,” Kivva adds.