SLCERT warns of rising WhatsApp account hackings

Tuesday, 3 December 2024 02:54 -     - {{hitsCtrl.values.hits}}

The Sri Lanka Computer Emergency Readiness Team (SLCERT) has reported a sharp rise in WhatsApp account hacking incidents, with 74 cases recorded in recent weeks.

Hacking victims include prominent politicians, legal counsels, and even journalists.

According to Senior Information Security Engineer Charuka Damu-nupola, these attacks often start with online meeting invitations sent via WhatsApp, either from unknown numbers or trusted contacts. Hackers then manipulate users into sharing a meeting verification code, which is exploited to seize control of their accounts.



Victims report that hackers initially reach out via a WhatsApp call, posing as professionals inviting them to an online meeting related to their field. The hackers then claim to have sent meeting login details and ask the victims to share the verification code they receive. This code is then used to gain access to the victim’s WhatsApp account.

Once hackers gain access, victims reported that fraudulent messages were sent to their contacts pretending to be the victim, requesting urgent fund transfers to third-party accounts with a promise to return the money the following day.

SLCERT is urging all WhatsApp users to remain vigilant and refrain from sharing personal verification codes under any circumstances.



If an account is compromised, users are advised to uninstall WhatsApp, reinstall the app, and re-register their phone number to restore control.



The organisation emphasises the importance of vigilance in safeguarding personal information to prevent unauthorised access and financial fraud.

COMMENTS