ISLAMABAD: The National Cyber Emergency Response Team (NCERT) has flagged a serious risk of targeted phishing and malware campaigns delivered through WhatsApp Web, desktop applications and email. The warning is aimed mainly at government officials and people who handle sensitive information, according to an advisory the agency has issued.
The advisory said attackers are posing as government officials and departments, sending malicious files disguised as official documents. Such files can infect Windows systems, potentially giving intruders remote control, the ability to steal passwords and access to sensitive data.
Hijacked sessions and warning signs to watch
Attackers could also take over WhatsApp Web sessions and impersonate users through their own phone numbers, putting contacts and confidential communications at risk. Unexpected messages or files from familiar numbers may signal a targeted attack, the advisory stated, and so may unknown devices appearing in WhatsApp’s linked devices list.
NCERT’s recommended precautions for users and officials
The agency recommends that officials handling sensitive information stop using WhatsApp Web and desktop applications on Windows systems. Users are also advised to:
- End suspicious WhatsApp Web sessions immediately and independently verify unexpected messages, links and files.
- Never share passwords, one-time passwords (OTPs) or verification codes with anyone.
- Avoid transferring WhatsApp files to official Windows computers.
- Keep Windows, browsers and other software updated.
- Enable two-factor authentication, including WhatsApp’s two-step verification feature.
If a device may be compromised, users should disconnect it from the network and the internet. The advisory also recommends preserving messages and system logs as evidence and avoiding reopening suspicious files.
