WhatsApp users targeted by account takeover phishing scams

Cybercriminals are utilizing sophisticated phishing schemes on WhatsApp to hijack user accounts through fraudulent voting requests. These scams often impersonate acquaintances or unknown senders to solicit clicks on malicious links.

One method involves a message regarding a girl named ‘Klara’ who supposedly needs votes for a scholarship. Another variation uses a fake Spotify podcast voting contest, claiming to be a participant in a collaboration between Spotify and Google.

When users click these links, they are directed to fraudulent websites that mimic legitimate platforms. These sites prompt users to enter their phone numbers and the code for the ‘Linked Devices’ function. Once provided, attackers gain full access to the victim's WhatsApp account, allowing them to read messages, access contacts, and spread the scam further using the victim's identity.