WhatsApp worm spreading Android malware — protect yourself now [updated]

WhatsApp worm spreading Android malware — protect yourself at present [updated]

(Epitome credit: NurPhoto / Getty Images)

Updated with comment from WhatsApp.

WhatsApp is existence used to spread a malicious Android app, according to a prominent security researcher.

Lukas Stefanko of ESET, following up on a tip from Twitter user @ReBensk, detailed the WhatsApp worm in a YouTube video (embedded below). If an infected telephone receives a WhatsApp message notification, the phone immediately sends back a link to a fake Google Play page inviting users to download the malicious app, Stefanko demonstrated.

iPhone security alert: Update to iOS 14.iv right now
The best Android antivirus apps to keep your phone clean
Plus: Leaving WhatsApp? Telegram wants to make it simpler to move over

In Stefanko'due south example, the malicious app is a fake Huawei app that seems designed to display ads on infected devices and earn coin for the app distributors. Only it could accept other forms — ane Twitter user reported seeing a similar scam involving a fake Netflix app.

In the grand scheme of dangerous Android malware, this kind of adware is pretty mild stuff, but you still don't want information technology to become on your phone.

"This malware could possibly distribute more dangerous threats since the message text and link to the malicious app are received from the attacker'south server," Stefanko told his colleague Amer Owaida in an ESET blog mail. "It could merely distribute banking Trojans, ransomware, or spyware."

To avoid infection, make sure your Android telephone can install software but from the official Google Play shop.

This varies among phones, just in general you desire to become into Settings > Apps > Special Access > Install Unknown Apps, and then make certain none of the apps on your phone are allowed to install apps on their own.

On older phones running Android 7 Nougat and before, information technology's Settings > Security, then make sure Unknown Sources is toggled off.

You likewise want to be running ane of the best Android antivirus apps, which will catch this malicious app before information technology installs.

WhatsApp reached out to Tom'due south Guide and gave us this statement:

"This is a malicious app that tricks people into downloading it and sending phishing messages through permissions granted by the Android operating system. We are reporting this to the domain provider that the phishing service is using to take action and to protect against this corruption. We strongly encourage people never to install apps from untrusted sources and to never tap unusual or suspicious links. We also encourage people to report messages like this as soon as possible so that we tin can take action."

Paul Wagenseil is a senior editor at Tom's Guide focused on security and privacy. He has too been a dishwasher, fry cook, long-haul commuter, code monkey and video editor. He's been rooting effectually in the data-security space for more than fifteen years at FoxNews.com, SecurityNewsDaily, TechNewsDaily and Tom'southward Guide, has presented talks at the ShmooCon, DerbyCon and BSides Las Vegas hacker conferences, shown upwards in random Boob tube news spots and fifty-fifty moderated a panel give-and-take at the CEDIA home-engineering briefing. You tin follow his rants on Twitter at @snd_wagenseil.