Learn how cybercriminals use compromised WhatsApp accounts to send malicious attachments.
You receive a message on WhatsApp, a popular app for sending instant messages. It’s from someone you know, such as a colleague, a friend, or even a family member. They’ve sent over an attachment that appears to be a business document, like a billing statement, payment record, or an account notice. It’s unusual for them to send you something like this, but since it’s from someone you trust, you might think it’s safe to open it.
Even though the message you received came from someone in your contacts list, it’s actually a phishing scam! Your contact may not even be aware that it was sent. If cybercriminals are able to gain control of someone else’s WhatsApp account, they can use it to send you messages, like this one. If you open the file, malware will be installed that gives cybercriminals full remote access to your device. They can view your screen and control your computer as if they were sitting right in front of it!
Tips to Stay Safe
Follow these tips to avoid falling victim to this phishing scam:
- Be cautious of any unexpected files sent via WhatsApp or other messaging apps, even if they appear to come from someone you know. If a contact sends you a file out of the blue, reach out to them through a separate channel, such as a phone call or another app, to verify it.
- Remember that files can be disguised to look like ordinary documents. If you receive something that feels out of place for the person who sent it, like a billing statement from a personal contact, trust your instincts and don’t open it.
- Always stop and think before you act! Cybercriminals can sometimes gain access to the accounts of trusted contacts and make phishing attacks seem more believable.
Stop. Look. Think. And don’t be fooled.
Tips of the Week Brought to You By Our Partners at KnowBe4
KnowBe4 is the world’s most popular integrated platform for awareness training combined with simulated phishing attacks. Let Keller Schroeder show you how KnowBe4 has helped thousands of organizations just like yours manage the continuing problem of social engineering. Contact us today to learn more.
