{"id":"whatsapp-imitation-app-spyware-apr-2026","category":"scam","status":"closed","title":"Fake WhatsApp iPhone app used for spyware; about 200 people warned","tldr":"WhatsApp warned about 200 people, mainly in Italy, about a spyware-laced imitation of its iPhone app. It blamed ASIGINT, part of SIO. Anyone warned should remove the imitation and install official WhatsApp; no WhatsApp security patch applies.","summary":"On 1 April, WhatsApp disclosed a targeted surveillance campaign involving an imitation of its iPhone app. It said approximately 200 people, primarily in Italy, may have downloaded the malicious app after being deceived outside WhatsApp. WhatsApp attributed the campaign to ASIGINT, a subsidiary of Italian surveillance company SIO. It logged out the identified users, warned them and advised removing the imitation and installing official WhatsApp. The company said this did not exploit a WhatsApp vulnerability and that encryption continued to protect communications through its official apps. SIO did not immediately respond to Reuters’ request for comment. WhatsApp planned a formal legal demand to stop the activity. As of 3 November, no later confirmed outcome was found: what information was taken, whether all affected devices were cleaned and the outcome of that demand remain unconfirmed.","action":"If WhatsApp warned you about this imitation app, remove it and install the official WhatsApp Messenger from Apple’s App Store. Use only the official app; there is no incident-specific WhatsApp patch to install.","product":"Counterfeit WhatsApp app for Apple iPhone","audience":"both","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["whatsapp","ios","spyware","impersonation","social-engineering","asigint","italy"],"affected":["People who installed the counterfeit WhatsApp iPhone app; app and iOS version numbers were not disclosed."],"fixed":[],"matches":[],"sources":[{"kind":"news","title":"WhatsApp’s statement on ASIGINT, reproduced by ANSA","url":"https://www.ansa.it/sito/notizie/topnews/2026/04/01/whatsapp-scopre-una-versione-falsa-creata-da-azienda-italiana-spiati-200_6d4472fe-0bed-4b8f-ac44-5b20f3acd411.html","by":"ANSA","date":"2026-04-01"},{"kind":"news","title":"WhatsApp warns users of fake app used to distribute spyware","url":"https://therecord.media/whatsapp-warns-users-of-fake-app-used-for-spyware","by":"The Record","date":"2026-04-01"},{"kind":"news","title":"WhatsApp says Italian surveillance company tricked around 200 users into downloading spyware","url":"https://www.marketscreener.com/news/whatsapp-says-italian-surveillance-company-tricked-around-200-users-into-downloading-spyware-ce7e51dcd88cfe25","by":"Reuters, via MarketScreener","date":"2026-04-01"}],"started":"2026-04-01","closed":"2026-04-01","created":"2026-11-03T21:35:42.010Z","updated":"2026-11-03T21:35:42.010Z","cve_notes":[],"timeline":[{"at":"2026-04-01","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"WhatsApp said it had logged out the identified users, warned them and advised replacing the imitation with its official app. Its statement also announced plans for a formal legal demand that ASIGINT stop the activity.","url":"https://www.ansa.it/sito/notizie/topnews/2026/04/01/whatsapp-scopre-una-versione-falsa-creata-da-azienda-italiana-spiati-200_6d4472fe-0bed-4b8f-ac44-5b20f3acd411.html","by":"ANSA, reproducing WhatsApp’s statement","patch":null},{"at":"2026-04-01","added":"2026-11-03T21:25:43.261Z","kind":"disclosed","text":"WhatsApp disclosed a targeted campaign using a spyware-laced imitation of its iPhone app. It attributed the campaign to ASIGINT, a subsidiary of Italian surveillance company SIO; about 200 people, mainly in Italy, were identified as potentially having downloaded it.","url":"https://therecord.media/whatsapp-warns-users-of-fake-app-used-for-spyware","by":"The Record","patch":"na"}],"url":"https://hard.fyi/live/whatsapp-imitation-app-spyware-apr-2026/","json":"https://hard.fyi/api/live?id=whatsapp-imitation-app-spyware-apr-2026"}