It’s one of the most popular apps in the world, but it appears that over a million Android users may have been tricked into downloading a fake version of WhatsApp.
A sneaky app called ‘Update WhatsApp Messenger’ has been downloaded by users on the Google Play store, who were fooled by a developer title with hidden characters.
Rather than being related to the Facebook-owned app, the fake version served users with adverts to download other apps.
It’s one of the most popular apps in the world, but it appears that over a million Android users may have been tricked into downloading a fake version of WhatsApp
The fake app appeared to be created by a developer with the title ‘WhatsApp Inc.’ – the same title as the real version.
But the app maker had added a Unicode character space after the WhatsApp Inc. name.
While this extra space didn’t appear on the app, in a computer code the difference is very obvious, with the developer name reading as ‘WhatsApp+Inc%C2%A0.’
The fake app was first spotted by users on Friday, who started a Reddit thread to raise awareness of it.
Megared17 wrote: ‘There are extra bytes which are a Unicode space at the end of the fake one. VERY difficult to see if you don’t look closely.’
And Sunny Cakes noted: ‘It already has 1 million installs.’
Once downloaded, users realised that the app was a fake version that served users with adverts to download other apps.
While the developer remains unknown, they later changed the name of the app to ‘Dual Whatsweb Update’ and removed the ‘WhatsApp Inc.’ developer title.
The app maker had added a Unicode character space after the WhatsApp Inc. name. While this extra space didn’t appear on the app, in a computer code the difference is very obvious, with the developer name reading as ‘WhatsApp+Inc%C2%A0’
Google has now removed the app from the Google Play store.
A spokesperson for Google said: ‘I can confirm that the app was removed from Google Play and the developer account was suspended for violating our program polices.’
Fake apps are a fairly regular occurrence on the Google Play store.
In April, up to two million Android devices were secretly hijacked by malware posing as Pokemon Go and Fifa gaming guides.
More than 40 apps offering fake walkthroughs of popular games were found in the Google Play Store by experts from Check Point.
Experts warned that the malicious apps can take control of devices without the user’s knowledge.