Every five minutes, the software secretly uploads the user’s own private info—their contact list, phone number, IMEI, and even personal SMS messages—to a "Command and Control" (C2) server run by hackers. The Result:
The user downloads an APK (Android) or a configuration profile (iPhone) from a third-party site because these apps are banned from the Official Google Play Store Apple App Store The Compromise:
have intercepted hundreds of thousands of attacks related to these malicious mods across the globe. The "Gold" Scam:
Similar scams like "WhatsApp Gold" or "WhatsApp Plus" use the same trick: promising exclusive features to lure you into downloading malware. How to Stay Safe 12 WhatsApp scams to know and avoid - Norton