If you've been downloading 'WhatsApp Plus' to read your ex's deleted messages, watch out. WhatsApp is notifying hundreds of users for installing fake applications developed by a company linked to government spyware. Spyware doesn't play nice; always use official channels or face the consequences.
The name behind this mess is SIO, a company that already had a track record: researchers had previously linked it to surveillance campaigns under the name Spyrtacus. This isn't some bored kid in his bedroom playing hacker; it's an operation with resources, with clients who probably wear ties and work in buildings with an official seal on the door. That makes the whole thing considerably more serious than the typical sketchy virus that arrives via a WhatsApp chain message.
The mechanics are the same as always, just executed with more care. Someone downloads a modified version of WhatsApp — WhatsApp Plus is the most popular, though other variants exist — drawn in by features the official app doesn't offer: custom themes, viewing deleted messages, knowing if you've been blocked, hiding the blue double checkmark. Sounds tempting. The problem is that the APK you downloaded from some random site doesn't come alone: it carries malware that installs silently and starts stealing personal information, messages, contacts, and who knows what else, all while you think you're being clever spying on someone.
WhatsApp detected the pattern and began sending notifications directly inside the app to affected users, warning them that the client they have installed is not legitimate. It's an unusual move: Meta rarely communicates this proactively with its users, which gives you an idea of how seriously they're taking this. If you got that warning, don't ignore it like it's an ad.
What do you do if you already have it installed? The basics: uninstall the fake app immediately, restart your phone, install WhatsApp from the official Play Store or App Store, and once you're in, close all active sessions from Settings > Linked Devices. Also change your two-step verification PIN. If you use the same passwords on other accounts — something you shouldn't be doing, but here we are — change those too.
The bottom line is this: pirated apps are not a bargain or a smart shortcut. They are the back door someone else deliberately left open to walk into your digital life. And when the person on the other side isn't a curious teenager but a company with ties to government intelligence, the level of potential damage goes up several notches. Next time someone sends you a link to 'WhatsApp Gold' or any variant with a flashy name, you already know what to do: ignore it and move on with your life.