The new malware is spreading via WhatsApp

New malicious malware is spreading among Android users. As IT professionals from eSet report on their blog, Which spreads via WhatsApp. “Download this app and win the smartphone,” Asset’s security experts cite fraudulent news. Clicking on the related link will end up in a fake Google Play Store.

Report your smartphone with malware via WhatsApp

If you also download a fake Hawaii app, you are infecting your smartphone with malware. “This malware spreads through the victim’s WhatsApp and automatically responds to every WhatsApp message with a link to a fake and malicious Hawaii mobile app,” explains Lucas Stefanco.

Asset malware researcher suspects that the app’s operator is trying to generate “fraudulent advertising revenue” in this way. However, in theory, it can also be used to spread the most dangerous threats. This includes bank Trojans and spyware.

Stephenco shows how fake apps and fraudulent messages can be on Twitter:

Asset researchers point out that Android devices have a security feature that is enabled by default. If users want to install apps that do not come from the official Google Play Store, they must seriously agree. You will be asked to do this with a fake Hawaii app. If you agree, assist the application to avoid safety precautions.

The application requires a large number of authorizations

Even more dangerous: “Once the installation process is complete, the application will require a number of permissions, including access to notifications, which will be used in conjunction with Android’s direct response function,” explains researcher Stephenko.

However, the fraud message will only be sent if the user of the affected smartphone has written to a contact on WhatsApp an hour earlier. The malware researcher considers this to be less suspicious. “Because getting a link in response to anyone can turn off the alarm,” he says.

You can protect yourself

The technology portal chip provides information on thisHow users can generally protect themselves from fraudulent attempts via WhatsApp and other messengers. Most important points:

• Regular updates: All applications and operating system should always be up to date.
• Before you click a link, be sure to check it carefully – even if it comes from someone on your own contact list. You can often tell from the web address or URL how serious the connection is. Confused word or number combinations and a result that does not have “.de” or “.org” or “.com” may be a sign of a suspicious website.
• As an Android user, it is always a good idea to download apps from the official Google Play Store. If you have an Apple smartphone, you can use the App Store.

The chip recommends that both PC and smartphone be compatible with security software. There are various free apps for Android.