🛑 “WhatsApp Plus XAP,” “Modded WhatsApp XAP,” or files from random blogs without comments/checksums. These may contain malware, despite Windows Phone’s strong sandbox.