Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

6 clusters · 44 sources · 19 days · First seen 19 days ago · Last updated about 6 hours ago

WhatsApp identity theft and evolving digital fraud

Overview

A series of identity theft attempts via WhatsApp has been reported involving public figures in South America. In Argentina, journalist Sergio Lapegüe alerted the public to a scam where an individual impersonated his daughter to claim her phone had broken. Colombian Senator Antonio José Correa Jiménez also reported impersonators using his name and official title to fraudulently manage administrative procedures. Law enforcement agencies in Spain, Colombia, Argentina, and Mexico have issued warnings regarding evolving fraud and extortion tactics. A prevalent method involves attackers gaining access to a user's account without logging them out, allowing criminals to send messages from the victim's real number to request urgent money transfers. In Spain, this has caused significant financial losses in regions such as Castilla y León, Madrid, and Navarra. Recent warnings from authorities in Spain, Italy, and Macau highlight increasingly sophisticated methods, including ‘zero-click’ attacks. These attacks, which particularly affect Apple devices running outdated iOS versions, allow criminals to compromise accounts without any user interaction. Once inside, scammers can coexist with the legitimate user to send fraudulent messages, often requesting approximately €1,000. In Spain, the Guardia Civil and National Police have specifically identified a surge in fraud in Huelva and Galicia. In Huelva, over 50 cases of ‘zero-click’ fraud were identified affecting iPhone users on iOS 16.7.12 or earlier. In Galicia, criminals have been reported impersonating victims to contact acquaintances via existing chat threads, often providing foreign bank details for urgent transfers. In Germany, authorities have identified variations where scammers use WhatsApp to impersonate known contacts to trick victims into clicking malicious links. These include fraudulent voting requests, such as messages regarding a girl named ‘Klara’ needing scholarship votes or fake Spotify podcast contests involving a purported collaboration between Spotify and Google.

Entities

WhatsApp · Policía Nacional · Guardia Civil · Meta · Google

Claims

What the coverage asserts, and how many sources carry each claim.

[● 2 SOURCES] Scammers are using fake business accounts to send fraudulent security alerts to WhatsApp users. borncity.com · macaudailytimes.com.mo
[● 2 SOURCES] Fraudulent messages claim accounts are ‘high-risk’ to pressure users into verifying their profiles. borncity.com · macaudailytimes.com.mo
[● 2 SOURCES] Clicking a ‘START’ button on fake security sites directs users to enter codes that allow scammers to hijack accounts. borncity.com · macaudailytimes.com.mo
[○ 1 SOURCE] A new wave of zero-click attacks is targeting WhatsApp users. www.ispazio.net
[○ 1 SOURCE] Zero-click attacks specifically target Apple devices running outdated versions of iOS and WhatsApp. www.ispazio.net
[○ 1 SOURCE] Compromised accounts can be used to impersonate contacts and request emergency funds. www.ispazio.net

Timeline

about 6 hours ago

[CRIME] 3 sources
Spanish authorities warn of rising WhatsApp fraud and zero-click attacks
Spanish police are warning of a rise in WhatsApp fraud in Huelva and Galicia, where attackers use “zero-click” methods and identity impersonation to solicit money from victims' contacts.
2 days ago

[TECHNOLOGY] 5 sources
WhatsApp users targeted by account takeover phishing scams
Fraudsters are using fake WhatsApp voting links for scholarships or Spotify contests to hijack user accounts by tricking victims into providing device linking codes.
5 days ago

[TECHNOLOGY] 10 sources
Cybersecurity authorities warn of rising WhatsApp and email fraud
Authorities in Germany and Portugal are warning against rising digital fraud, including WhatsApp impersonation scams, fake contest voting links, and deceptive emails using celebrity likenesses.
9 days ago

[TECHNOLOGY] 13 sources
WhatsApp scams: Authorities warn of zero-click attacks and extortion
Police in multiple regions are warning of new WhatsApp scams, including zero-click account takeovers and extortion via single-view photos, targeting users with outdated software.
11 days ago

[TECHNOLOGY] 9 sources
WhatsApp fraud: Authorities warn of new identity theft and extortion tactics
Authorities in several countries are alerting users to new WhatsApp scams, including identity impersonation, account hijacking that allows simultaneous use, and extortion via the ‘view once’ photo feature.
19 days ago

[CRIME] 6 sources
Sergio Lapegüe alerts public to WhatsApp impersonation scam
Journalist Sergio Lapegüe alerted the public after a scammer attempted to defraud him by impersonating his daughter on WhatsApp using her photo and a fake phone number.

Sources

adslzone.net · bbv-net.de · beobachter.ch · bierzodiario.es · borncity.com · cadenadial.com · canal44.com · centrodeinformacion.manizales.gov.co · colombia.com · diariodelnorte.net · diariolucentum.com · djangourmet.com · elfrontal.com · elidealgallego.com · euroweeklynews.com · excelsior.com.mx · giga.de · halternerzeitung.de · infobierzo.com · ispazio.net · jornalnordeste.com · labandadiario.com.ar · lamilano.it · lanocion.es · lapampadiaxdia.com.ar · lapioneradeclorinda.com · lattacco.it · macaudailytimes.com.mo · mayacomunicacion.com.mx · movilzona.es · ndmais.com.br · netzwelt.de · olhardigital.com.br · piercingjewelry.com · postal.pt · sapo.pt · soydemac.com · teltarif.de · todoandroid.es · uexheim.de · vanguardia.com.mx · watchlist-internet.at · wochentlich.de · zamoranews.com

This summary has been updated 7 times: see revision history