WhatsApp Accounts Targeted by Evolving Hijacking Scams

• •Cybercriminals are using phishing and SIM swap tactics to hijack WhatsApp accounts.
• •Victims are tricked into authorizing linked devices, allowing attackers to access their messages.
• •The scams are particularly damaging in regions where WhatsApp is crucial for financial transactions.

Cybercriminals are employing new tactics to hijack WhatsApp accounts, primarily through phishing and SIM swap attacks. The scams often involve compromised accounts sending messages that trick users into authorizing linked devices. Attackers can then access messages and send requests for money to the victim's contacts. The impact is particularly severe in regions like East Africa, where WhatsApp is integral to digital financial transactions. Recent reports indicate that these scams exploit the trust of users by masquerading as familiar contacts. Malwarebytes identified a campaign where users were prompted to vote in contests, leading to unauthorized device linking. The Central Bank of Kenya has highlighted the need for improved digital literacy to combat these threats. Recovery from such hijacking can take days, resulting in significant financial losses for individuals and businesses.