WhatsApp users are at risk of a new fraud scheme. Attackers use video calls to gain access to accounts and later to the victim’s contacts.
The scheme looks like this: the fraudster calls through the app, posing as a person from the contact list. After the response, the screen remains black, and the attacker asks to “share the screen” to supposedly help solve the issue with the display.
At this moment, the victim receives an SMS with a WhatsApp confirmation code. During the demonstration of the screen, this code becomes visible to the criminal. After receiving it, the fraudster links the account to his/her device and blocks access to the real owner.
Next, the attackers begin sending messages on behalf of the victim to friends, colleagues and relatives, most often with a request to transfer money.
What to do if your account is hacked:
- immediately warn your friends about possible fraudulent messages;
- contact the person on whose behalf the call was received so that he also checks the security of the account;
- Reinstall the app and try to restore access;
- Contact WhatsApp support (support@whatsapp.com );
- collect evidence of fraud and be sure to notify your bank to protect accounts and prevent unauthorized transactions.
How to protect yourself from the new scheme:
- activate two-step authentication in WhatsApp;
- never share confirmation codes – they are strictly personal;
- do not use the “share screen” function without being sure that you are communicating with a familiar person;
- carefully check incoming calls and messages, especially with requests for money transfer.
Cybercriminals are becoming more inventive, so it’s important to remain vigilant. Eurasian Bank recommends that customers always check information received through messengers and contact the Bank or the police at the slightest suspicion.