21

Since yesterday, WhatsApp and Zygote have been asking for root permissions on my phone via supersu. Apparently zygote is a system app.

Is this malware? Lookout scan came up clean.

Improve this question
4
  • 5
    On another note, if you allowed them to get root, you should consider your device to be compromised and wipe it completely.
    – Léo Lam
    Commented Jan 8, 2017 at 10:03
  • I have got the same on Android 6, rooted with Xposed Framework. It suddenly happened, I did not install some suspected stuff. Whatsapp works normal. P | grep Zygote brings 3 entries: Zygote, Zygote64 and xposed_zygote_service.
    – Matze
    Commented Jan 9, 2017 at 11:11
  • 1
    Are you using Xposed ? Seems like issue with Xposed
    – samnaction
    Commented Jan 9, 2017 at 12:06
  • Do you have the whatsapp extention exposed module installed? check the xda-thread.
    – nYce
    Commented Jan 10, 2017 at 0:25

1 Answer 1

Reset to default
28

It is unlikely for WhatsApp to need root privileges, and impossible for zygote to ask for it.

Zygote is an essential system component that is started by init process itself while booting, so it does implicitly inherit root privileges.
Matter of fact, zygote is responsible for starting every other app, be it system apps or other apps.

Having said that, these two apps (installed in your device that asks for root access) are strongly MALWARE.

If you have ADB, issue the command adb shell ps | grep zygote. (Or from Terminal Emulator as ps | grep zygote)
I believe the output will be two processes: one is the real zygote, and the other 'zygote' is part of a package name, which is a malware.

Improve this answer
3
  • 1
    To clarify are you saying WhatsApp is strongly malware? Or the specific program calling itself whatsApp that op has installed is malware? (I'm asking from an unrooted Android phone that has WhatsApp installed)
    – BruceWayne
    Commented Jan 8, 2017 at 0:23
  • 12
    @BruceWayne The real WhatsApp is fine - it would be all over the news if it weren't as it is the #18 free app on the Play Store. He's talking about the fake WhatsApp OP may have.
    – Piper McCorkle
    Commented Jan 8, 2017 at 4:13
  • I always has the real WhatsApp and it also asking for root
    – NaturalBornCamper
    Commented Jun 3, 2019 at 16:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .