Please note that "шһатѕарр.com" is the fake and malicious website and "whatsapp.com" is the legitimate website. What the cybercriminals have done is to use different character code to create the fake and malicious website, but make it look similar to the legitimate one.
A Sample of the "New Colors for WhatsApp Function" Fake Message or Scam
How the "New Colors for WhatsApp Function" Scam Works
Whatsapp user gets the following message saying WhatsApp is now available with different colors:
"I love the new colors for WhatsApp hxxp://шһатѕарр.com/?colors."
If the link or button in the fake message is clicked, WhatsApp users will be taken to the fake and malicious website at hxxp://шһатѕарр.com/?colors, which actually goes to this malicious website: hxxp://blackwhats.site/.
Whatsapp.com users will then ask to share the link with multiple groups for human verification.
Once WhatsApp users have done sharing, they will be asked to install adware apps. After they have installed the adware the website says the WhatsApp color is available only in WhatsApp web and then ask them to install a malicious Chrome extension located in the Google Chrome Store:
- hxxps://chrome.google.com/webstore/detail/ blackwhats/apkecfhccjhdmicfliebkdekbkoioiaj
Once the malicious extension or adware is installed, the infected devices will start displaying annoying or malicious advertisements.
WhatsApp users should never install an upgrade or features if they are asked to share before they can do so. This is how cybercriminals trick potential victims into spreading the malware to other users. And, there is no need to click on a link to install a new feature of Whatsapp because WhatsApp will automatically update itself or will let you know when a new feature is available. Therefore, avoid messages that ask to install WhatsApp features.
Related alert:
Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below. And, to quickly find answers to your questions, use our search
engine.
Note: Some of the information in samples on this website may have been impersonated or spoofed.
Was this article helpful? +
Comments, Questions, Answers, or Reviews
To protect your privacy, please do not post or remove sensitive information in or from your comments, questions, or reviews. NB: We will use your IP address to display your approximate location to other users when you make a post. That location is not enough to find you.
Your comment, answer, or review will be set as anonymous because you are not signed in. An anonymous comment, answer, or review cannot be edited or deleted, therefore, review it carefully before posting. Sign-in.
Show More Comments (4)
Write Your Comment, Question, Answer, or Review