


It is also being distributed via an unofficial Android app store contained in the VidMate video downloader, where it is going by the name of WhatsApp Plus. This is not the first time Triada has been found piggybacking on WhatsApp mods – Kaspersky previously reported on a similar issue in August 2021 – but in this instance the tainted version of YoWhatsApp is also being advertised on other services, including Snaptube, a video downloader for YouTube and other services. However, the version found by Kaspersky is in fact being used to spread the Triada mobile Trojan, which is capable of downloading other Trojans, signing its victims up for unwanted paid subscriptions and even stealing WhatsApp accounts.

YoWhatsApp offers a number of features that are not available in WhatsApp, such as the ability to block calls from contacts or unsaved numbers, bulk messaging, new privacy features, additional language options, the ability to set background images or wallpapers, and additional themes and emojis, among many other things.
