This sinister WhatsApp text ‘installs worm on phone to infect all your friends’

A MALICIOUS WhatsApp message that installs a ‘worm’ on your phone and infects your friends is targeting Android users.

The sinister text has been highlighted by a prominent security researcher who has created a YouTube video to warn others about the WhatsApp worm.

Lukas Stefanko of tech security firm ESET was tipped off about the scam by Twitter user @ReBensk.

Stefanko described the malware as an “Android worm” that uploads adware onto your phone and then spreads by automatically sending WhatsApp messages to your contacts.

In order to get the worm, you’d first have to receive the malicious message yourself.

It tells you to download what claims to be a Huawei app in the hope of winning a free smartphone.

The link to the app actually takes you to a fake and rather convincing looking Google Play page.

If you then click install you’ll end up with the ‘worm’ on your phone.

Stefanko’s video demonstrates the scam with a fake Huawei app that seems designed to display adverts on your device and make money from app distributors.

When you receive a WhatsApp notification your phone will automatically send the person who messaged you that malicious link.

The malicious link will only be sent to a contact once an hour and you might not even be aware that it’s sent if you don’t check your messages very often.

However, it’s possible for the malware to be presented in different forms and some people have tweeted about a fake Netflix app being involved.

Even though the main aim of the app seems to be to fill your phone with adverts and make money, Stefanko thinks the scam could be used to spread even more malicious software.

The security expert explained in an : “This malware could possibly distribute more dangerous threats since the message text and link to the malicious app are received from the attacker’s server.

“It could simply distribute banking Trojans, ransomware, or spyware.”

Android users could avoid infection by only allowing their phone to download apps from the official Google Play Store.

On most Android phones you can do this by going to Settings, Apps, Special Access and then click Install Unknown Apps.

Here you’ll be able to make sure none of your apps can download other apps on their own.

Always be wary of suspicious links and never install something unless you’re sure and you’ve done your research.

In other news, Facebook will no longer recommend “political or civil” groups to users.

Scam emails claiming that the recipient has been selected to receive a coronavirus vaccine have been highlighted by concerned experts.

And, Apple has warned that the iPhone 12 could ‘interfere’ with pacemakers.

We pay for your stories! Do you have a story for The Sun Online Tech & Science team? Email us at tech@the-sun.co.uk