Brief
UAE Cyber Experts Warn of Malware Risk from WhatsApp and Telegram App Links
Experts say the UAE’s high app‑download volume makes it a prime target for malware disguised as legitimate applications.
By Felo News Desk · Published
Cyber‑security specialists have urged residents of the United Arab Emirates to stop downloading mobile applications shared through WhatsApp, Telegram and other informal channels. The warning comes from Pushkar Singh, country head for the Middle East and Africa at Protectt. AI, who spoke at the Gisec Global 2026 conference.
Why the UAE is a Target
Singh highlighted that the UAE is among the regions with the highest volume of app downloads worldwide, making it a prime target for malicious software disguised as legitimate applications. He said that apps circulated through informal channels often have their integrity compromised, and users may not realise the risk before installing them.
Detection and Prevention
According to Singh, technology can detect whether an application has been sourced illegitimately or tampered with, and can block it from functioning even if an unaware employee has already installed it on a corporate device. He noted that some apps in circulation have been “re‑engineered” with malicious code injected into them, a threat his firm addresses through code obfuscation and runtime protection tools.
AI‑Enabled Social Engineering
Singh also warned of a sharp rise in AI‑enabled social engineering scams. He pointed to voice and video duplication technology that makes impersonation scams easier to pull off, noting that transactions authorised during what appears to be a genuine video or voice call could, in fact, be the work of fraudsters using AI‑generated likenesses.
Other Risks and Recommendations
He cautioned against the casual use of VPNs and proxy services without understanding where traffic is being routed, noting that intercepted traffic is another common vector attackers exploit. Singh advised enterprises to build security controls so that even if an unaware user has downloaded an app, it should not work, and to select security solutions based on fit rather than cost alone.
Key facts
- UAE residents are advised to stop downloading apps via WhatsApp and Telegram (khaleejtimes.com)
- Singh said the UAE has one of the highest app‑download volumes globally (khaleejtimes.com)
- Malware can be disguised as legitimate apps circulated through informal channels (khaleejtimes.com)
- AI‑enabled social engineering scams are rising, using voice and video duplication (khaleejtimes.com)
- Singh recommends enterprises adopt runtime application self‑protection and AI security tools (khaleejtimes.com)
Background
The warning follows a recent IBM study highlighted in a Felo News article on 18 September 2026, which found that 96% of UAE executives lack full understanding of AI dependencies and 74% struggle with data residency. The study also identified mismanaged secrets and weak threat prioritisation as common cloud oversights, contributing to rising cyber risks.
Why it matters
The UAE’s high app‑download volume and growing fintech sector make it a prime target for malware and AI‑driven scams, threatening personal data and financial transactions.
What happens next
Singh urged enterprises to build security controls and select solutions based on fit rather than cost, extending protection beyond core applications to mobile endpoints and AI agents.
Sources
- [1] khaleejtimes.com — originally reported as “Fake app links on WhatsApp and Telegram put UAE users at risk, warn cyber experts”
