Android WhatsApp Worm This malware spreads automatically through the WhatsApp network

Android WhatsApp Worm
Android WhatsApp Worm


The video can be viewed here

https://twitter.com/i/status/1352278725702856704  

The latest attacks on Android come from WhatsApp, a virus that has the ability to spread automatically from WhatsApp itself.

The Android WhatsApp worm was discovered by ESET researcher Lucas Stefenko, who claims that the malware is automatically transmitted through the WhatsApp network, abusing the phone's alert system.

The attack itself takes advantage of our ability to accept human weakness by clicking and accepting what is placed in front of us. The link posted via WhatsApp is similar to the URL that will contain the Google Play application link, but it is a false link that we take to the application store. Once again, a fake copy of Google Play that installs a fake APK download from Huawei.

Once this file is downloaded, it manually asks us to allow it to show itself in other applications, perform battery optimizations and allow the application to access our notifications. Without realizing it, we have given this application so much power that it is able to do whatever it wants on our mobile phone.

Thus, the app is not only able to run in the background but can also appear on top of other apps; This is important because it allows the malware to create and display versions of popular apps and websites, retrieving our passwords and information.

Thanks to the controls on the mobile that got it, the app then sends messages via WhatsApp to our contacts to repeat the loop.

  

Android WhatsApp Worm
Android WhatsApp Worm

ESET advises that, although for now it only uses WhatsApp as a distribution method, you should be careful with similar messages in Messenger or Telegram. ESET says this is the first time that Android malware has the same functionality to distribute itself via WhatsApp messages.

 

The video can be viewed here

https://twitter.com/i/status/1352278725702856704