A fake WhatsApp application for Android has been detected in the Google Play Store, where it has exceeded 500,000 downloads and could even appear above the official version thanks to a sponsored advertisement. This discovery comes a few days after the removal of a fake Google Chrome application that had also been promoted through advertising in the Android store and downloaded more than 100,000 times.
A copy of WhatsApp was propelled to the top of the results
The fake WhatsApp app was reported after a Reddit user noticed that appeared in the sponsored results of a search for the actual courier service. Published under the developer name “Agment Assets sallu”, it uses the WhatsApp name, its icon, its screenshots and much of the official presentation text. According your profile in Play StoreIt has already exceeded 500,000 downloads.
The problem is all the more worrying as this copy can benefit from paid visibility above the official application. However, this is not a systematic result: according to some users, the official version appears first. The copy also appears to be enrolled in the Google Play Store’s “Early Access” program, which disables public reviews and therefore deprives users of a common way to spot a suspicious app.
The fake Chrome had exceeded 100,000 downloads
Two days earlier, another Reddit user reported that a fake Google Chrome app had been downloaded more than 100,000 times before being removed from the Play Store. It was published by a developer called “Hizbartech” and also appeared in sponsored results, sometimes on top of the actual Google browser.
The app was first launched under the name “Ball Bounce” as a game on August 22. On September 30, its developer changed its name and icon to give it the appearance of Chrome. However, it was not a browser, but a discussion application with pre-recorded responses. Google eventually removed this copy after reporting and media coverage of the matter.
These two cases raise a question of trust: an application present in the official Google store is not necessarily authentic and a sponsored position does not guarantee its legitimacy either. In both cases, the developers managed to exploit the resemblance to popular applications to gain visibility, when the verification system should have prevented identity theft.
To limit risks, it is recommended to verify the exact name of the developer before any installation. For WhatsApp, the official publisher is WhatsApp LLC. For Chrome, this is Google LLC. Be wary of copies that use official logos and descriptions, even when they appear at the top of the results.
