Meta has alerted approximately 200 iPhone and Android users who downloaded a malicious fake version of WhatsApp, according to Italian news agency ANSA. The company confirmed most victims were in Italy and had been tricked through social engineering tactics into installing unofficial WhatsApp software.

WhatsApp stated its security team identified the compromised accounts and automatically logged out affected users, warning them about privacy and security risks. The messaging platform also took action against Italian spyware firm Asigint, controlled by Sio Spa, which is believed to be behind the attack. The malicious app was distributed through "less controlled third-party channels" rather than official app stores.

WhatsApp emphasized this incident involved an unofficial client rather than a vulnerability in its platform. While the exact method of distribution remains unclear, the attack highlights ongoing risks from sideloaded applications. Users who received alerts were notified about potential data access by the malicious software, though specific details about compromised information have not been disclosed.