📸 YoWhatsApp/YoWA
- Mod apps are advertised as unofficial versions of legitimate apps that have features that the official one does not support.
- YoWhatsApp is a fully working messenger which supports additional features, such as customizing the interface or blocking access to individual chats.
- WhatsAppGB has not been the only mod in the market, it has just been the most popular.
- It’s a well-performed modified version of META’s official WhatsApp.
- YoWhatsApp is almost similar to GBWhatsApp & FMWhatsApp – (another mod) but still, it’s much better than both of them according to users.
According to TechCabal Daily & ITNewsAfrica, Kaspersky researchers have discovered a new malicious version of a popular WhatsApp messenger mod (modification) dubbed YoWhatsApp.
The mod has features that the official app does not offer and also spreads the notorious Triada mobile Trojan, which can download other Trojans, issue paid subscriptions, and even steal WhatsApp accounts.
Users around the world were affected by this threat in the last two months, and more than a quarter of them, 27% from the META (Middle East, Turkey, Africa) region.
Within the META region, 27% of users affected were from African countries.
YoWhatsApp is advertised in the popular Snaptube app and is also distributed via Vidmate. This makes the mod look much less suspicious to potential targets and expands the possible number of victims.
Users prefer to download WhatsApp mods such as YoWhatsApp because they provide far more options, such as custom backgrounds and fonts for chats, bulk messaging, more personalised settings, and more features.
To use the WhatsApp mod, users need to log in to their account of the legitimate app. However, along with all the new features, users also receive the Triada Trojan. Having infected the victim, attackers download and run malicious payloads on their device, as well as get hold of the keys to their account on the official WhatsApp app.
Along with the permissions needed for WhatsApp to work properly, this gives them the ability to steal accounts and get money from victims by signing them up for paid subscriptions that they are not even aware of.