WhatsApp Alerts Users to Fake iOS App Laden with Spyware

Approximately 200 WhatsApp users, primarily in Italy, were recently alerted to the installation of a fraudulent iOS application containing spyware. The discovery highlights the growing threat of sophisticated social engineering attacks targeting popular messaging platforms.

Fake App Disguised as Official WhatsApp Client

Meta-owned WhatsApp identified a malicious app masquerading as its official iOS client. This fake app was designed to compromise user privacy and security by installing spyware on their devices. The majority of affected users are located in Italy, according to reports from Italian newspaper La Repubblica and news agency ANSA .

SIO/Asigint Linked to Malicious Activity

WhatsApp has taken action against Asigint, an Italian subsidiary of spyware company SIO, alleging the firm created the counterfeit WhatsApp application . SIO advertises surveillance solutions to law enforcement, government organizations, and intelligence agencies, including tools for monitoring suspect activities and conducting covert operations .

Previous Malicious Activity by SIO

This isn’t the first instance of malicious activity linked to SIO. In December 2025, TechCrunch reported that SIO was responsible for a set of malicious Android applications that mimicked WhatsApp and other popular apps. These apps were used to steal private data from targeted devices using the Spyrtacus spyware family . The apps were believed to have been deployed by a government customer to target individuals in Italy.

WhatsApp’s Response and User Recommendations

WhatsApp has logged out all affected users and is recommending they uninstall the malware-laden apps and download the official WhatsApp application from the official App Store. The company has not disclosed the identities of those targeted .

Italy as a “Spyware Hub”

SIO is one of several Italian companies involved in the surveillance tool market, contributing to Italy’s reputation as a “spyware hub.” Other companies operating in this space include Cy4Gate, eSurv, GR Sistemi, Negg, Raxir, and RCS Lab .

Past Incidents with Paragon Solutions

In early 2025, WhatsApp previously alerted around 90 users that they were targeted with Graphite spyware developed by Paragon Solutions . Italy and Paragon have since ended their collaboration .

Key Takeaways

• Approximately 200 WhatsApp users were targeted with a fake iOS app containing spyware.
• The Italian firm SIO/Asigint is accused of creating the malicious app.
• WhatsApp has logged out affected users and urged them to reinstall the official app.
• Italy is emerging as a significant hub for the development and sale of spyware.