After Chrome, a fake WhatsApp also appeared in the Play Store. It accumulated over half a million downloads

On Friday, we wrote about a fake Google Chrome that, thanks to paid advertising, appeared above the actual browser application in the Play Store. Later that same day, it turned out that a fake WhatsApp also managed to get above the original using the same trick, and according to the data on its page, it accumulated over half a million downloads.

Fake WhatsApp made visible by an ad directly in the Play Store

The app was brought to attention by user 2ne1cheese, who posted a screenshot from the search on Reddit (reported by Android Authority). When searching for WhatsApp in the Play Store, the first result shown was a sponsored result, which ranked even above the real messenger. The imitation’s page had the same icon, screenshots, and description as the original.

The difference was again mainly in the developer’s name. Instead of WhatsApp LLC, it said “Agment Assets sallu,” an account that had no other applications in the store. According to the data on the app’s page, it was released in September. However, the ad apparently was not shown to everyone.

Developer exploited a loophole to hide reviews

With suspicious applications, people usually check the ratings where others warn them. But here, there were none. According to Android Authority, the fake WhatsApp likely exploited the early access program, which disables public reviews for participating applications. This program is intended for unfinished applications where developers collect feedback before the official release.

The security firm Bitdefender warned about the abuse of this loophole back in September. According to them, the program saw thousands of fake casino games, reward-promising apps, and dubious tools. Some even borrowed famous names, such as Grand Theft Auto V.

The app has already disappeared from the store

As of Friday afternoon, when both Android Authority and The Verge reported on the app, it was available in the store. When we tried to open the page on Saturday, the store no longer found it. It is unclear whether Google removed the app or if the developer removed it themselves. Google has not yet commented on the case.

Questions also remain about what the app did after launch. None of the servers have yet described how the imitation behaved on the phone, and whether it stole data is not clear from current reports.

How to recognize the real WhatsApp?

Under the name of the real app, the developer is WhatsApp LLC. For the number of downloads, you will see a figure of over 10 billion, and hundreds of millions of people have left ratings for it. An application without a single review that claims to be a well-known brand is a warning sign. It’s advisable to avoid results marked as ads when searching for well-known applications.

If you suspect you have installed an imitation, uninstall it in your phone’s settings. Never enter the verification code from an SMS that WhatsApp sends you anywhere else, and never send it to anyone. Whoever obtains it can log into your account on their phone. To be safe, enable two-step verification in the real WhatsApp, which additionally requires your PIN when registering a number on a new device, and review how WhatsApp now secures accounts.

Do you check who the developer is before installing an app?

Sources: Reddit, Android Authority, The Verge, Bitdefender