The site called SocialSpy WhatsApp is again a hot topic of conversation, because it is narrated that it can be used to tap other people's WhatsApp conversations.
Is that true? From our experiments, the narrative is almost certainly inconsequential. If you think about it using common sense, how could WhatsApp, with its end-to-end encryption, be intercepted in such an easy way?
On its website, SocialSpy says users need to enter the target phone number, complete with the country code. Then after that the user must complete the verification to prove he is not a bot. The third or final stage, the target conversation is said to have been seen.
The site itself is simple. There is a WhatsApp logo, steps to do, and a column to enter a phone number complete with a 'submit' button. Actually, without the need to try any of the services, what SocialSpy has to offer is clearly impossible.
But to prove that this is a fraudulent site and you don't need to open it, that's it, we'll try it all. We entered the original phone number, not even in the form of a phone number because it was mixed with letters, and pressed the submit button.
Then the site will display animations as if they are "loading", accessing the server, loading data, and so on. Then the site will ask for verification to prove that we are not bots.
The verification step referred to here is filling out odd surveys. Oh yes, this verification page is no longer at the SocialSpy address, but is directed to the cpabuild site, which is a click-collecting site, where members will be paid according to the number of clicks on the link.
So, the more people who are tricked into wanting to tap a certain WhatsApp number (partner number, maybe), the more income the owner of the cpabuild link will earn.
"This is a scam. So the victim is tricked by an animated screen as if the process of spying on the number he is targeting is running," said Alfons Tanujaya, cyber security observer from Pasifikcom when contacted by us.
"In fact, they will be directed to ad sites that will give clicks from the creators of this scam application," he concluded.
