Malicious Activity Analysis: vipspy.site (Targeting WhatsApp Data) Keywords: WhatsApp, Thmyl, Spyware, Phishing, Account Compromise Date: October 26, 2023 TLP: CLEAR 1. Executive Summary The domain vipspy.site is currently identified as a malicious asset associated with phishing campaigns and "spy" services targeting WhatsApp users. The term "thmyl" (a transliteration of the Arabic word Thamayil / Tahmil , meaning "Downloads") indicates the primary lure used by the threat actor: promising users the ability to download WhatsApp data, view private messages, or track contacts. Uptobox Login Top Here