Red alert for WhatsApp users - follow new rules or your account may be 'hijacked'
WhatsApp users are being urged to stay alert and watch out for a worrying new type of attack.
If you suddenly receive a message asking you to vote on a topic, be warned. It appears that scammers are trying a new tactic to trick chat app users, and not following some simple rules could leave accounts 'hijacked'.
This latest threat is taking advantage of popular voting schemes, which offer the chance for users to have their say and reveal who their favourite sports stars or actors are.
According to the security team at Kaspersky, these messages sometimes aren't what they seem. Instead of offering an interactive vote, they actually include links that direct people to fake websites where personal data is stolen.
"The scam begins with users being directed to a seemingly legitimate webpage claiming to host a voting contest," Kaspersky explained. "For instance, the page can feature photos of athletes, each accompanied by a “Vote” button and real-time counters displaying alleged vote totals and the number of users who have participated.
"These elements create a false sense of authenticity, encouraging user engagement."
Those who are fooled could end up giving crooks their user names and private 6-digit code, which are then used to hijack the account.
Explaining more, Tatyana Shcherbakova, Web Content Analyst at Kaspersky, said: “We see that online contests that include voting are very popular now, and this is used by attackers who exploit trust in this seemingly harmless activity. By combining social engineering with convincing fake interfaces, attackers are weaponizing user engagement to steal sensitive data. Awareness and vigilance are critical to staying safe."
To be protected from such hijacking scams, Kaspersky recommends following these four rules.
· Enable two-step verification: Activate WhatsApp ’s two-step verification feature to add an extra layer of security, requiring a PIN for account access.
· Verify website authenticity: Avoid entering personal information on unfamiliar websites, especially those reached via unsolicited links. Always check the URL for legitimacy.
· Never share verification codes: WhatsApp will never ask for your verification code. Do not share it with anyone, or accept it from anyone, even if prompted by a seemingly trusted source.
· Use trusted and proven security software to detect and block malicious websites and links.