ISLAMABAD (Kashmir English): The National Cyber Emergency Response Team (NCERT) has asked users against sharing passwords, one-time passwords (OTPs) or verification codes with anyone amid fear of targeted phishing and malware attacks through WhatsApp Web.
It issued a high-alert advisory, warning of targeted phishing and malware attacks through WhatsApp Web, desktop applications and email, particularly against government officials and individuals handling sensitive information.
According to the advisory, attackers would be impersonating government officials and departments to send malicious files that can compromise Windows systems.
It warned that files dubbed as official government documents are being used to infect devices, potentially allowing attackers to gain remote control, steal passwords and access sensitive data.
WhatsApp Web sessions
The advisory warned that attackers could also hijack WhatsApp Web sessions and impersonate users through their own phone numbers, putting contacts and confidential communications at risk.
Receiving unexpected messages or files from familiar numbers may indicate a targeted attack, while unknown devices appearing in WhatsApp’s linked devices list could be another warning sign, the advisory stated.
The NCERT has suggested that officials handling sensitive information avoid using WhatsApp Web and desktop applications on Windows systems.
The users have also been advised to immediately terminate suspicious WhatsApp Web sessions and independently verify unexpected messages, links and files before opening them.
The NCERT advisory further warned users against sharing passwords, one-time passwords (OTPs) or verification codes with anyone, recommending that WhatsApp files not be transferred to official Windows computers.
Users have been advised to keep Windows, browsers and other software updated and enable two-factor authentication, including WhatsApp’s two-step verification feature.
In case a device is suspected of being compromised, users should immediately disconnect it from the network and the internet, the advisory also recommended.
