Scammers are trying to lure unaware users to perform unwanted actions by claiming that the Whatsapp users are capable of installing a plugin which will modify their Whatsapp application layout, to a Blue Whatsapp application layout.
The Whatsapp in Blue scam is currently hosted at hxxp://whatsappblue.com (18.104.22.168), but it would not suprise me, if they would use other colors, instead of sticking to the now known “blue” color Whatsapp scam.
The Whatsapp in Blue scam website uses various titles to lure the unaware users into performing unwanted actions, one of the other titles that is being used by the Whatsapp in Blue scam, is the “Whatsapp Trendy Blue” title.
The hxxp://whatsappblue.com website holds various “FAKE” reviews, the fake accounts “Lena Davis“, “Kevin Loyola” and “Sara John” have left a message which simply claim that the “Whatsapp in Blue theme is cool”.
We decided to see if this “Whatsapp in Blue theme” scam actually does something with the phone number, but it seems that nothing happends directly.
We provided a fake telephone number which does not have Whatsapp installed, but the “Whatsapp in Blue Theme” scam simply allowed our input, and started showing “bogus” logs in order to let us believe that it is working.
Once it was “Finished” it claimed that we needed to:
CLICK THE BELOW BUTTON TO PROVE THAT YOU ARE AN ACTIVE WHATSAPP USER..
Alright, sure. Once you click on the button, a new window will be shown, which forces the user to share a specific message to their friends on Whatsapp.
The message is:
whatsapp://send?text=Wow Friends !!! I just got %F0%9F%92%99 Whatsapp in Blue,It s Pretty Cool and Awesome..Update Your Version From Here –> hxxp://BlueWhatsApp.com
Translated to readable language:
Wow Friends !!! I just got <3 Whatsapp in Blue,It s Pretty Cool and Awesome..Update Your Version From Here –> hxxp://BlueWhatsApp.com
As you can see in the message above, the scammers are trying to lure unaware users to the website by forcing users to spread a fake message via Whatsapp.