{"id":144384,"date":"2019-07-11T15:56:02","date_gmt":"2019-07-11T15:56:02","guid":{"rendered":"http:\/\/sftarticles.wpenginepowered.com\/en\/?p=144384"},"modified":"2025-07-01T21:41:58","modified_gmt":"2025-07-02T04:41:58","slug":"whatsapp-infects-millions-of-android-phones-with-malware","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/whatsapp-infects-millions-of-android-phones-with-malware\/","title":{"rendered":"WhatsApp infects millions of Android phones with malware"},"content":{"rendered":"

\"WhatsApp\"<\/p>\n

About\u00a025 million Android phones were infected with malware <\/a>hidden inside WhatsApp, according to an article from Forbes. Essentially, the virus replaced certain apps (including WhatsApp) with fake versions that bombard the user with ads.\u00a0<\/strong><\/p>\n

Because it is copying and replacing apps with a malicious version, the Malware virus has been named Agent Smith based on the character from “The Matrix.”<\/p>\n

How did this happen and what is it doing?<\/h2>\n

A third-party app store called 9apps.com is responsible for the spread. If you downloaded your apps from the Play Store, you should be safe.\u00a0<\/strong>You can still download WhatsApp from the website, but we’d recommend downloading it from us just to be safe.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"WhatsApp\r\n <\/div>\r\n
\r\n WhatsApp Messenger<\/span>\r\n Download Now \u25ba<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path>8<\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n

As of now, the only thing that the malware appears to be doing is bombarding the user with malicious ads. However, Agent Smith has lots of harmful potential. Since it can hide in plain sight, the virus can present a privacy risk without the user knowing what’s happening.\u00a0<\/strong><\/p>\n

Most of the infected Android phones are in India (about 15 million). However, there are still about 300,000 infected phones in the U.S. and about 137,000 in the U.K.<\/p>\n

What should I do?<\/h2>\n

If you downloaded anything from 9apps.com, you should uninstall all of those apps immediately just to be safe<\/strong>. Although WhatsApp was the main app infected with Agent Smith, there were others.<\/p>\n

You should also regularly scan your phone for viruses. Free apps like Malwarebytes can do that for you lickety-split.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"Malwarebytes\"\r\n <\/div>\r\n
\r\n Malwarebytes<\/span>\r\n Download now \u25ba<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path>8<\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n

Should I uninstall WhatsApp forever?<\/h2>\n

Although WhatsApp has had virus attacks in the past including a spyware attack a few months back<\/a>, this one doesn’t seem to be their fault. Only downloads from 9apps.com appear to be harmful.<\/p>\n

If you enjoy using WhatsApp or if you need it on a daily basis, you can still keep doing so. Just make sure you download it from a safe source.<\/p>\n

\r\n

More about WhatsApp<\/p>\r\n

\r\n \r\n
\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

What is WhatsApp Vacation Mode? \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n \r\n

\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

Inside WhatsApp's frequently forwarded message tabs \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n

\r\n \r\n
\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

Improved Picture-in-Picture mode coming to WhatsApp \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n \r\n

\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

How to add a contact to WhatsApp \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"

About 25 million Android users have been hit with a Malware attack that sends them malicious ads. <\/p>\n","protected":false},"author":9180,"featured_media":144403,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[2333,2191,1627,2026,1043],"usertag":[790],"vertical":[],"content-category":[],"class_list":["post-144384","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-app-subdomain-redirectionwhatsapp","tag-hack","tag-malware","tag-virus","tag-whatsapp","usertag-whatsapp"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/144384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9180"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=144384"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/144384\/revisions"}],"predecessor-version":[{"id":325734,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/144384\/revisions\/325734"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/144403"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=144384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=144384"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=144384"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=144384"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=144384"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=144384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}