Threats · 180 days ago
WhatsApp identified a fake iOS client created by Italian spyware company SIO/ASIGINT. The fake app was distributed via social engineering, tricking about 200 users, mostly in Italy, into installing spyware. WhatsApp logged out these users and warned them about privacy risks. This attack did not exploit any WhatsApp vulnerability; official apps remain protected by end-to-end encryption. WhatsApp plans to send a formal legal demand to stop the spyware activity. The case highlights attackers’ preference for deception over exploiting app flaws to gain device access.
3 sources covering this story
WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action
WhatsApp alerted 200 users in Italy to spyware iOS app, highlighting Europe’s expanding surveillance crisis.
The Record from Recorded Future
WhatsApp warns users of fake app used to distribute spyware
Most of the impacted users are in Italy, according to a WhatsApp announcement.
The Meta-owned company said it identified around 200 users who were tricked into installing a fake version of WhatsApp that was actually Italian-made spyware.
Part of the PlainSec briefing for 2026-04-02