u/elcalvo75

I downloaded, scanned, installed, scanned Abu Saleh's WhatsApp Mods v26.86 and it scored 1/77 on Virus Total.

The 1 hit was Android.Riskware.TestKey.rA which seems to show up when a MODder signs the APK with a debug signature (since (s)he is not the developer).

Just consider this as an update on my previous post. I don't have any affiliation with whichever Whatsapp MOD (and would like to keep it this way) but use the one that suits my purpose best (and so should you). Usage by linking method is recommended.

For what it is worth it, for now, I have a positive opinion on Abu Saleh's MOD (again), MB Mod and Walitex. If you want to try one of these, go ahead and do it at your own risk. Google or look in the subreddit for the download link or location, I am not going to share; a little bit of effort by the one who wants it, is the least I'd say.

I have used WhatsApp mods for years and I check the code from time to time. Until now I never had any issues.

A post in the MBMods Telegram channel warned that many mods carry a data stealing trojan. It gave a list of clean and infected mods. Abu Saleh's WhatsApp Mods v26.77 failed. It seems this is inserted in a recent version: I check frequently and never had issues.

I have used Abu Saleh's app since his predecessor for years without a single issue. I tried to help people who could not find a working app to use the app based on my experience. Now I want to warn them.

The lists below come from MBMods, not from me.

Clean after their checks (they note they have not reviewed every mod): WhatsApp LiteX, MBWhatsApp, LX WhatsApp, OX WhatsApp (never heard of LX or OX)

Contain the data stealing code:

• GBWhatsApp by Abu Saleh
• VCTM and any YessiMods remod
• DH WhatsApp
• Delta WhatsApp
• Karina WhatsApp
• Delta Extreme WhatsApp
• CM WhatsApp / CM Activator
• WhatsApp Nova
• WhatsApp Gold
• ARWhatsApp
• HT3WhatsApp
• WaPlusClean
• Any remod based on Abu Saleh's GBWhatsApp
• Any mod with "Activator" in its name

Both GB and OG WhatsApp v26.77 had three of those files: xprmtofk, ydzntloe, iintbpzx. I installed ESET and did an analysis and it caught Android/Agent.FJL which means a Trojan.

I liked the extra features but not in exhange of access to my or your bank data or other information. Back to stock !