mvt VS WhatsDump

Amnesty International released Mobile Verification Toolkit to check your phone for malware, by checking encrypted backups on your computer. https://github.com/mvt-project/mvt

From what I was able to read previously, it has no ability to spread by itself and has to be installed by a targeted attack. There is also a tool from Amnesty International that can detect it (or was able to): https://github.com/mvt-project/mvt

It is a race though, so past info may no longer be valid. However, I doubt it will ever be able to spread by itself, since it uses very expensive zero days to infect and they will be quickly fixed after detection.

Public Service Announcement:

Amnesty International has a program on GitHub with Citizens Lab for those keeping an eye out for additional protections

https://github.com/mvt-project/mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

You can do a backup of your phone and analyze said backup using digital forensics to see if for example "automated software" will detect any of the more mainstream spyware/hacks. You can use mobile verification toolkit (mvt) to do this, but it won't detect everything. It is however a good start, you can investigate the basic results with limited knowledge and if something is detected you can further it up to a digital forensics company because it will very highly likely be beyond your qualifications to analyze by yourself. Hope this helps.

I was extremly paranoid i got a virus a few months ago and i think i may have downloaded something. Its been more thank half a year and just remebered that i tried to download something from here,https://github.com/mvt-project/mvt i dont know if i was even sucessful, i am fully updated ios, cant find anything in files so i dont think i had it for very long and prob dealted after a whille

If you wanna check your phone, maybe try using this: https://github.com/mvt-project/mvt

if android, this is available -- https://github.com/mvt-project/mvt

The next best thing was https://github.com/MarcoG3/WhatsDump that would use an emulator to talk to Whatsapp servers and get the key, but that isn't working too since recently (BTW pinging /u/Drooliog/ if you still think the key is coming from your SIM and you have some totally local backup).