WhatsApp users beware! Do not download this infected mod app

Lately, there have been several app bans from the Google Play Store. It was done in a bid to secure the platform. However, there are modified versions of various apps on the Play Store, which could infect a user’s device. A new trojan has been discovered in a modified version of WhatsApp for Android. It is called Trojan Triada. The malware is able to download a payload that further carries out malicious activities on the device without the consent of the user.

The latest development comes from cybersecurity major Kaspersky. Researchers from the team shared in a recent report that the Trojan Triada affects FMWhatsApp 16.80.0, a modified version of WhatsApp. Such modified apps are usually made to provide additional features to users which are not found in the original WhatsApp. However, downloading the FMWhatsApp modified app could land you in trouble.

According to Kaspersky, Trojan Triada has now snuck its way into the new version of FMWhastApp along with its advertising software development kit (SDK). If you launch the app, which is infected with the trojan, it will gather device identifiers (Device IDs, Subscriber IDs, MAC addresses) and send them back to a remote server. The server is said to register the new device and send back a link to a payload. The trojan in the app then downloads this payload onto the infected device. After this, it decrypts the content and launches it for operation.

Researchers have discovered several different types of malware carrying out such activities through FMWhatsApp. One of them is explained above. There is another malware that can perform multiple functions on the infected device. It can display full-screen ads, run invisible ads in the background to increase the number of views they get, and even sign up the device owner up for paid subscriptions without their knowledge.

Kaspersky warns users against downloading such modified apps. It goes on to add that other than being signed up for unwanted paid subscriptions, users can even lose complete control of their accounts altogether. Moreover, hackers can also hijack these accounts to further spread spam and malware in your name.