Beware of "New Colors for WhatsApp Function" - it is an Adware or Malware
Would you share this article with others to help inform them?
Please note that "шһатѕарр.com" is the fake and malicious website and "whatsapp.com" is the legitimate website. What the cybercriminals have done is to use different character code to create the fake and malicious website, but make it look similar to the legitimate one.
A Sample of the "New Colors for WhatsApp Function" Fake Message or Scam
How the "New Colors for WhatsApp Function" Scam Works
Whatsapp user gets the following message saying WhatsApp is now available with different colors:
"I love the new colors for WhatsApp hxxp://шһатѕарр.com/?colors."
If the link or button in the fake message is clicked, WhatsApp users will be taken to the fake and malicious website at hxxp://шһатѕарр.com/?colors, which actually goes to this malicious website: hxxp://blackwhats.site/.
Whatsapp.com users will then ask to share the link with multiple groups for human verification.
Once WhatsApp users have done sharing, they will be asked to install adware apps. After they have installed the adware the website says the WhatsApp color is available only in WhatsApp web and then ask them to install a malicious Chrome extension located in the Google Chrome Store:
-
hxxps://chrome.google.com/webstore/detail/ blackwhats/apkecfhccjhdmicfliebkdekbkoioiaj
Once the malicious extension or adware is installed, the infected devices will start displaying annoying or malicious advertisements.
WhatsApp users should never install an upgrade or features if they are asked to share before they can do so. This is how cybercriminals trick potential victims into spreading the malware to other users. And, there is no need to click on a link to install a new feature of Whatsapp because WhatsApp will automatically update itself or will let you know when a new feature is available. Therefore, avoid messages that ask to install WhatsApp features.
Related alert:
Note: Some of the names, addresses, email addresses and telephone numbers in email samples on this website may have been impersonated.
Please share what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.
Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com
Also, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent.
If you want to quickly find answers to your questions, use our search ![]()
engine.
You can help maintain Online Threat Alerts by paying a service fee. Click here to make payment.
Comments, Questions, Answers, or Reviews
![]()
To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews. Also, anonymous posts cannot be deleted or edited, and when you make a post, we will use your IP address to display your approximate location to other users.
Please continue reading below.
![]()
Show More Comments (5)
Write Your Comment, Question, Answer, or Review
Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.