Fake WhatsApp PC app file distributes banking Trojans
Following the recent announcement that WhatsApp would no longer be limited to mobile devices and would also be available on computers, cybercriminals were quick to create a lure to trap some of the service's 700 million or more users.
On January 21, WhatsApp CEO Jan Koumsaid that the app, which is so popular on mobile devices, has a web client that could be used by Google Chrome to give users access to all conversations and messages made from their mobile device.
Even though the CEO explained that the web client is simply a website that mirrors the original content that is still cached on the phone, cybercriminals took advantage of the news and devised new forms of attack, tricking users with fake downloads that are supposed to be the desktop version of the app.
Security researchers from Kaspersky found thousands of samples online, targeting users from all over the world.
In Brazil, they observed a fake, promising download of WhatsApp for Windows, which delivered banking Trojans to victims' computers. Multiple domains had been created, some active and others on hold.
In another case, the scammers tried to trick unsuspecting users into adding a suspicious extension for Google Chrome that appeared to be the messaging app, says Kaspersky 's Fabio Assolini .
Additionally, the list of fake downloads also includes publications in Spanish and Arabic.
In some cases, in order to receive the coveted file, a user had to provide their mobile phone number. This way, cybercriminals have the ability to send spam or can register the victim for services with additional fees, Assolini says.
A spam message could also contain links that lead to malicious sites. These links are often disguised by using a link shortening service like Bit.ly or Goo.gle. When the recipient follows the link, they are taken to a page that hosts malware or services that attempt to earn a subscription.
Additionally, there have been cases where the landing page hosted a fake message warning of malware and offered users a "useful" phone number where they could speak with technical support in order to find a solution to the problem.
Regardless of the motivations behind these messages and websites, users are advised to download WhatsApp for web from the app's official website.
