Technology and Science01 April, 20261 min read
WhatsApp Unmasks SIO Spyware in Fake iPhone App, Logs Out 200 Users
Around 200 iPhone users, mostly in Italy, installed a counterfeit WhatsApp containing spyware. Italian spyware maker SIO, via ASIGINT, built the counterfeit app.
WhatsApp Purges Spyware App
WhatsApp discovered a sophisticated spyware campaign affecting about 200 users. The fake app was created by Italian surveillance company SIO and distributed outside official app stores. WhatsApp logged out affected users, alerted them, and urged deletion of the malicious client.
SIO's Government Ties Explored
The spyware was traced back to SIO's subsidiary ASIGINT which develops surveillance solutions for governments. WhatsApp's discovery came less than 18 months after naming Paragon Solutions' Graphite. Italian telecom providers often collaborate with authorities to distribute spyware.
Spyware's Capabilities
Spyrtacus can intercept SMS and messages on WhatsApp, Signal, and Messenger. It records calls and ambient sounds, and captures images via the phone's camera. This was not a WhatsApp vulnerability; end-to-end encryption remains effective for official apps.
Legal and Ethical Implications
WhatsApp plans to send a formal legal demand to SIO. The incident exemplifies tensions at the intersection of commercial tech, government surveillance, and human rights. State actors hide malware in fake apps rather than exploiting known vulnerabilities.