Repeated suspected high-grade mobile compromise involving WhatsApp

also WhatsApp does require DCL to function on GOS, so any messages you’re seeing there are likely valid attempts for it to load itself