WhatsApp alerted approximately 200 users who were tricked into installing a counterfeit iOS app containing spyware. The Italian firm Asigint, a subsidiary of SIO, is accused of creating this malicious application, primarily targeting users in Italy.
Initial Access
Deceptive App Lure
confirmed
Threat actors employed social engineering to persuade users to download and install a malicious application disguised as the official WhatsApp iOS app.
Defender cut points
User awareness training on verifying app sourcesStrict mobile device management (MDM) policies to prevent sideloading