A malware known as Android GravityRAT is targeting whatsapp backups. The malware is also reported to have capabilities such as deleting files. There may be a separate spyware, known as Kamran, that is targeting users in pakistan, but its connection to the whatsapp backup issue is unclear.