Fake Whatsapp called “YoWhatsApp” Stealing Accounts, Personal Data

Thousands of users' accounts and personal information are being stolen by a fraudulent WhatsApp version that is currently in circulation. Cybersecurity analysts at Kaspersky Lab shared the report.

This unlicensed version is known as "YoWhatsApp," a messaging program with full functionality that steals access credentials for user accounts. It is promoted through advertisements on other scam apps like Snaptube and Vidmate and has the same permissions as traditional WhatsApp.

YoWhatsApp, on the other hand, lets you connect two phones to a single account, unlike the original WhatsApp, and includes additional features like texting anonymously, reading messages that have been deleted, and password-protecting conversations.

According to experts at Kaspersky, the most recent version of YoWhatsApp (v2.22.11.75) collects WhatsApp keys, making it possible for intruders to take control of your account. The stolen WhatsApp keys are received by the developer's remote server.

Open-source tools can connect to the server with these keys and carry out operations as the user without the client.

Despite the fact that it is unknown whether these keys have been used in any attacks so far, they are still causing concern due to the potential for account takeovers, data breaches, the impersonation of close contacts, and other issues.

The application is infected with the Triada Trojan, which opens a backdoor for the software. Using app permissions may sign you up for premium subscriptions without your knowledge.

There are other fake WhatsApp versions, one of which is called "WhatsApp Plus."It has the same awful features that can steal accounts and more.

Thankfully, none of these apps can be downloaded from the Google Play Store; in this way, at the hour of composing, they ought not to be ready to harm most clients.