New cyber threat associated with WhatsApp messenger
The Center for Forecasting Criminal Threats and Public Safety Risks of the Committee on Legal Statistics and Special Accounting of the General Prosecutor's Office of the Republic of Kazakhstan warns of a new cyber threat associated with the WhatsApp messenger.
According to world sources (https://infobezopasnost.ru/blog/news/kiberataka-ghostpairing-pozvolyaet-moshennikam-poluchit-polnyj-dostup-k-whatsapp-bez-vzloma-parolya/, https://www.securitylab.ru/news/567291.php, https://securitymedia.org/news/list/ataka-ghostpairing-pozvolyaet-nezametno-zakhvatyvat-akkaunty-whatsapp.html), a new method of capturing WhatsApp accounts is called "GhostPairing" Using this method, scammers gain full access to the messenger without hacking the password, without replacing the SIM card and without complex hacker attacks. They use the ability to link additional devices to your WhatsApp account (for example, a browser on a computer).
The scenario is very simple: the user receives a fake message supposedly from Facebook or WhatsApp. The message asks you to go to a fake website that exactly copies the interface of Facebook and WhatsApp. This site asks you to enter a phone number and a verification code. After transferring this data, the attacker automatically registers the victim's account as a trusted device and gains full access to WhatsApp: reading messages, viewing media files, accessing the contact list, sending messages and viewing photo galleries. At the same time, the phone continues to work as usual and does not arouse suspicion.
The only way to verify this kind of capture is to manually look at the Linked Devices section of WhatsApp. If an unknown device is found there, it means that your account has been hacked and must be deleted immediately.
Cybersecurity rules that must be followed:
- Be careful with unknown messages, calls and notifications;
- Never enter the WhatsApp code on third-party sites - an additional request for a code from outside is a sign of fraud;
- Enable two-factor authentication;
- Regularly check the activity of your account;
- Use anti-virus and security programs.
One mistake and your personal correspondence will be completely under the control of attackers. Be careful!
