Ministry Issues Warning on WhatsApp 'Boss Scam' Targeting Finance Professionals

The Indian Cyber Crime Coordination Centre (I4C) has issued a warning about the 'Boss Scam', where attackers hijack WhatsApp accounts of finance professionals using malware disguised as account statements. The malware, which activates on Windows systems, is spread through compressed files labeled as 'Statement of Account.zip', 'RBI.zip', or 'MCA.zip'. This scam has seen a significant rise in complaints across multiple states, including Delhi, Gujarat, Maharashtra, and Rajasthan. Cybercriminals exploit compromised accounts to send urgent fund transfer requests, often impersonating senior executives. The I4C has advised organizations to verify any urgent requests through direct communication and to avoid opening files from unknown sources. A standard operating procedure has been issued to enhance security awareness among finance teams. Investigations are ongoing in collaboration with law enforcement agencies.

Key Points: • The 'Boss Scam' targets finance professionals by hijacking WhatsApp accounts. • Malware is distributed via compressed files disguised as legitimate documents. • I4C recommends immediate verification of urgent fund transfer requests.