{"id":85104,"date":"2017-11-06T17:11:56","date_gmt":"2017-11-06T11:41:56","guid":{"rendered":"https:\/\/blogs_admin.quickheal.com\/?p=85104"},"modified":"2017-11-06T17:51:44","modified_gmt":"2017-11-06T12:21:44","slug":"fake-whatsapp-apps-google-play-analysis-quick-heal-security-labs","status":"publish","type":"post","link":"https:\/\/www.quickheal.com\/blogs\/fake-whatsapp-apps-google-play-analysis-quick-heal-security-labs\/","title":{"rendered":"Fake WhatsApp Apps on Google Play – an analysis by Quick Heal Security Labs"},"content":{"rendered":"

A couple of fake WhatsApp apps found their way into the Google Play Store. These apps’ pages , names and developer title ‘WhatsApp Inc.’ look similar to the ones of the original WhatsApp app. Quick Heal Security Labs ran an analysis on these apps and this post outlines the results.<\/span><\/p>\n

 <\/p>\n

\"Original
Original WhatsApp<\/figcaption><\/figure>\n

 <\/p>\n

\"Fake
Fake WhatsApp Apps<\/figcaption><\/figure>\n

Fake app #1. Update WhatsApp Messenger<\/strong><\/p>\n

\"On
On Google Play, the app looks like the updated WhatsApp App.<\/figcaption><\/figure>\n

Package name: <\/strong>com.kkhkhk.gbkhdamch<\/p>\n

This app was found on Google Play with the name ‘Update WhatsApp Messenger’ and Quick Heal Security Labs reported this to Google.<\/p>\n

What does it do?
\n<\/strong>Once installed, the app asks the user to register their phone number and country name and wait for an activation code. But, no such code is received and in between this process, the user is bombarded with advertisements. This clearly shows that the developer’s main aim was to generate ad revenue.<\/p>\n

\"fake-whatsapp2\"<\/p>\n

Current Status<\/strong>: Removed from Google Play.<\/p>\n

Fake app #2. WhatsApp Messenger<\/strong><\/p>\n

 <\/p>\n

\"fake-whatsapp-app2\"<\/p>\n

Package name:\u00a0<\/strong>com.sosso.aoso<\/p>\n

This app that masquerades the original WhatsApp app was also reported by Quick Heal Security Labs to Google.<\/p>\n

\"fake-whatsapp3\"<\/p>\n

What does it do?<\/strong><\/p>\n

Once installed, the app asks the user to register with an activation code valid for 12 or 24 months. If the user selects either of the options, the app shows a message that the activation code will be valid for 24 hrs but nothing happens.<\/p>\n

Current Status<\/strong>: Removed from Google Play.<\/p>\n

Detection
\n<\/strong>At the time of writing this post, no mobile security solution had detected these fake apps according to VirusTotal (www.virustotal.com).<\/p>\n

\"virustotal2\"<\/p>\n

 <\/p>\n

How to stay away from fake apps?<\/strong><\/p>\n

\u2022 If you want to update an app, always go to the \u2018My apps & games\u2019 section in your Google Play App and tap on ‘update’. That way, you can ensure the update is genuine and not a fake.<\/p>\n

\u2022 If you are searching for an app on Google Play and multiple, identical apps show up, then visit the app’s official website and compare the information.<\/p>\n

\u2022 Protect your device with a reliable mobile security app<\/a> that can prevent fake apps from getting installed on your device.<\/p>\n

\u2022 Also check for reviews before installing an app. However, note that reviews can be faked too.<\/p>\n

 <\/p>\n

Acknowledgment<\/strong><\/p>\n

Subject Matter Expert
\nAnand Kumar Singh| Quick Heal Security Labs<\/p>\n","protected":false},"excerpt":{"rendered":"

A couple of fake WhatsApp apps found their way into the Google Play Store. These apps’ pages , names and developer title ‘WhatsApp Inc.’ look similar to the ones of the original WhatsApp app. Quick Heal Security Labs ran an analysis on these apps and this post outlines the results.     Fake app #1. […]<\/p>\n","protected":false},"author":29,"featured_media":85115,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[965,1513],"tags":[1521],"class_list":["post-85104","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-adware","category-whatsapp","tag-fake-whatsapp-app"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/85104"}],"collection":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/users\/29"}],"replies":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/comments?post=85104"}],"version-history":[{"count":10,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/85104\/revisions"}],"predecessor-version":[{"id":85128,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/85104\/revisions\/85128"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/media\/85115"}],"wp:attachment":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/media?parent=85104"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/categories?post=85104"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/tags?post=85104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}