WhatsApp Unmasks SIO Spyware in Fake iPhone App, Logs Out 200 Users

WhatsApp discovered a sophisticated spyware campaign affecting about 200 users.

“Security researchers at Lookout, prompted by a discovery from TechCrunch, have confirmed the existence of spyware called Spyrtacus that hides behind a counterfeit copy of WhatsApp”

01net

The fake app was created by Italian surveillance company SIO and distributed outside official app stores.

01net

WhatsApp logged out affected users, alerted them, and urged deletion of the malicious client.

The spyware was traced back to SIO's subsidiary ASIGINT which develops surveillance solutions for governments.

WhatsApp's discovery came less than 18 months after naming Paragon Solutions' Graphite.

Digit

Italian telecom providers often collaborate with authorities to distribute spyware.

Spyrtacus can intercept SMS and messages on WhatsApp, Signal, and Messenger.

“In Italy, it’s not just the espresso that’s strong; digital surveillance seems to be just as tight”

Gagadget

It records calls and ambient sounds, and captures images via the phone's camera.

This was not a WhatsApp vulnerability; end-to-end encryption remains effective for official apps.

WhatsApp plans to send a formal legal demand to SIO.

The incident exemplifies tensions at the intersection of commercial tech, government surveillance, and human rights.

Latest news from Azerbaijan

State actors hide malware in fake apps rather than exploiting known vulnerabilities.