the Italian secret services involved?
After the malware that steals your banking data on WhatsApp, the instant messaging application has to face a new controversy. And indeed and as reported by our colleagues from MotherBoard, the techno branch of Vice, hackers tried to trick iPhone owners into installing a fake version of WhatsApp.
After investigation, it turns out that this fake WhatsApp was developed by a Italian company specializing in surveillance and official provider of Italian intelligence services. Called Cy4Gate, this company has notably created an application to follow the evolution of the pandemic in the country. These clients are varied, since Cy4Gate has worked for Fiat, Chrysler, or the US military.
The principle of this fake app is simple: trick users into installing configuration files or mobile device management (MDM) profiles. These profiles allow businesses to monitor Apple devices on their network and protect them from malware. Mobile Device Management is regularly used on Apple devices to allow IT teams to restrict access to certain features or applications.
Read also: WhatsApp FINALLY details what it shares with Facebook
WhatsApp denounces this hijacking
According to MotherBoard researchers, administrators of several config1 (2,3,4,5) -dati.com-type domains hosted a page that contained a link to install the fake WhatsApp app. This phishing page covers the interface, logo and color code of WhatsApp.. Of course, WhatsApp has confirmed that it has absolutely no involvement in this matter.
” We are not asking for access to these user privileges and people should be wary of any application that attempts to do so ”, a WhatsApp spokesperson told Motherboard. With the spy app on the device and the configuration file installed, operators were able to retrieve the UDID, the device’s unique identifier, and the IMEI (International Mobile Equipment Identity) number. Impossible for the moment to know what are the other data collected and what were the real targets of this operation.
For now, it is advisable to download only WhatsApp from the App Store. ” We strongly oppose the abuse of spyware companies, regardless of their customer base. Modifying WhatsApp to harm other people violates our terms of service. We have taken and will continue to take action against such abuses, including in court ”, assured WhatsApp.
Protect yourself !
To prevent your data from being intercepted, take the initiative and go for a VPN. At the moment, CyberGhost only costs 2 € / month (-83% reduction) and can protect up to 6 devices. If your data is encrypted on the network, you can’t use it against you …
Source: Vice MotherBoard
