Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [ACTIVE] · [TECHNOLOGY]
26 clusters · 154 sources · 64 days · First seen · Last updated
WhatsApp identity theft and evolving digital fraud
Overview
The landscape of digital fraud continues to evolve, with authorities in Spain, Argentina, Colombia, Mexico, Germany, Austria, Portugal, Italy, the Netherlands, and Australia reporting diverse cybercrime tactics. In Spain, the National Police and Civil Guard have noted a surge in WhatsApp identity theft through ‘zero-click’ attacks on outdated iPhones. Cybersecurity experts have identified a dangerous zero-click vulnerability affecting users on iOS 16, allowing attackers to hijack accounts without any user interaction to request urgent money transfers. In Portugal, the Public Security Police (PSP) has warned of account cloning and spoofing where victims continue using the app normally while criminals invisibly send fraudulent messages to contacts.
A recurring method involves ‘ghost pairing’ scams, where attackers use hacked accounts to send seemingly harmless requests, such as voting for children named ‘Sophie’, ‘Eliska’, or ‘Franziska’ in contests. These schemes direct users to links that prompt them to enter codes via the ‘Linked Devices’ function, granting attackers full access. Researchers at Gen Digital have identified this ‘GhostPairing’ tactic, noting that attackers often use deceptive messages claiming to have found a photo of the recipient to lure users to fraudulent pages mimicking Facebook.
Recent reports highlight a resurgence of these tactics across Europe. In Italy and San Marino, authorities have alerted the public to the ‘ballerina scam’, where victims are invited to vote for dancers in fake competitions. In Spain, the Guardia Civil, National Police, and OCU have issued specific warnings regarding a fraudulent voting scheme using names like ‘Eliska’ or ‘Sophie’. When victims click these links and enter a code to ‘link a device’, criminals gain full session access to impersonate the victim and request money. Experts advise users to never enter such codes and to immediately check ‘Linked Devices’ settings to terminate unrecognized sessions.
Entities
WhatsApp · Meta · Incibe · Polizia di Stato · Guardia Civil
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 2 SOURCES] Scammers are using fake business accounts to send fraudulent security alerts to WhatsApp users.
- [● 2 SOURCES] Fraudulent messages claim accounts are ‘high-risk’ to pressure users into verifying their profiles.
- [● 2 SOURCES] Clicking a ‘START’ button on fake security sites directs users to enter codes that allow scammers to hijack accounts.
- [○ 1 SOURCE] A new wave of zero-click attacks is targeting WhatsApp users.
- [○ 1 SOURCE] Zero-click attacks specifically target Apple devices running outdated versions of iOS and WhatsApp.
- [○ 1 SOURCE] Compromised accounts can be used to impersonate contacts and request emergency funds.
Timeline
-
[TECHNOLOGY] 2 sourcesWhatsApp account recovery steps and security precautions
Users can recover hacked WhatsApp accounts by verifying their phone number via a six-digit code, which automatically logs out unauthorized devices. Two-step verification delays may require a seven-day wait.
-
[TECHNOLOGY] 6 sourcesWhatsApp voting scam targets users in Spain
A WhatsApp scam using fake dance competition votes is targeting users in Spain. Scammers use a fraudulent link to hijack accounts by tricking victims into linking unauthorized devices.
-
[TECHNOLOGY] 19 sourcesWhatsApp phishing campaign targets users with fake dance contest scams
A widespread WhatsApp phishing scam uses fake dance contest votes for ‘Eliska’ or ‘Sophie’ to hijack accounts via ghost pairing.
-
[TECHNOLOGY] 16 sourcesWhatsApp scams target users via fake voting contests and account hijacking
Cybercriminals are hijacking WhatsApp accounts by tricking users into voting for fake ballet contests, allowing attackers to control accounts and solicit money from contacts.
-
[TECHNOLOGY] 4 sourcesWhatsApp accounts targeted by ‘ghost pairing’ scam
Scammers are hijacking WhatsApp accounts through ‘ghost pairing’ scams, using fake voting requests to link unauthorized devices to victims' accounts and spread fraudulent messages.
-
[CRIME] 2 sourcesItaly authorities warn of WhatsApp and SMS fraud schemes
Italian police have warned of rising digital scams, including WhatsApp account hijacking via fake contests and SMS smishing involving fraudulent speeding violation notices.
-
[TECHNOLOGY] 6 sourcesWhatsApp accounts targeted by voicemail and social engineering attacks
Cybercriminals are targeting WhatsApp accounts through social engineering, SIM swapping, and exploiting insecure voicemail systems to intercept verification codes.
-
[TECHNOLOGY] 4 sourcesWhatsApp accounts targeted by fake dance competition scam
A phishing campaign known as the ‘ballerina scam’ is targeting WhatsApp users by using fake dance competitions to steal account access and personal data.
-
[TECHNOLOGY] 6 sourcesWhatsApp users targeted by zero-click account hijacking scams
Cybercriminals are using “zero-click” attacks to hijack WhatsApp accounts and impersonate users to solicit urgent money transfers from their contacts via fraudulent messages.
-
[TECHNOLOGY] 2 sourcesWhatsApp account theft scam targeting users via fake contests
Italian police warn of a WhatsApp scam where criminals use fake online contest links to steal accounts and impersonate victims to solicit money from their contacts.
-
[TECHNOLOGY] 2 sourcesWhatsApp security: How to prevent account hijacking and unauthorized access
WhatsApp users are urged to enable two-step verification and monitor linked devices to prevent scammers from hijacking accounts through fraudulent requests for six-digit verification codes.
-
[TECHNOLOGY] 2 sourcesWhatsApp users targeted by GhostPairing account hijacking scam
A WhatsApp scam known as ‘GhostPairing’ tricks users into linking hackers to their accounts by using fake photo-sharing links and fraudulent security codes.
-
[CRIME] 2 sourcesWhatsApp investment scams targeting community groups
Scammers are using WhatsApp hobby groups and fake news reports to promote fraudulent high-yield trading platforms and steal funds through social engineering and impersonation.
-
[TECHNOLOGY] 10 sourcesWhatsApp phishing scam uses fake voting requests to hijack accounts
Scammers are using fake voting requests on WhatsApp to hijack accounts through ‘Ghost Pairing,’ subsequently using compromised profiles to solicit money from the victim's contacts.
-
[TECHNOLOGY] 3 sourcesWhatsApp security: Account suspension risks and scam prevention
WhatsApp users are warned about account suspension risks due to policy violations and the increasing prevalence of scams aimed at hijacking accounts through social engineering and security code theft.
-
[CRIME] 2 sourcesWhatsApp scams: How hackers hijack accounts via OTP theft
Cybercriminals are using WhatsApp to hijack accounts through OTP theft and system exploits, often impersonating trusted contacts to facilitate financial fraud.
-
[CRIME] 2 sourcesPSP issues alert over new WhatsApp account cloning scam
The Portuguese PSP has warned of a WhatsApp scam where fraudsters clone accounts via outdated software to impersonate users and request urgent money transfers from their contacts.
-
[CRIME] 8 sourcesWhatsApp users warned of ‘Ghost Pairing’ account takeover scam
Police in Germany and Austria warn of the ‘Ghost Pairing’ WhatsApp scam, where attackers use fake voting links to hijack accounts via QR codes or device linking.
-
[TECHNOLOGY] 2 sourcesWhatsApp security tips to prevent account theft and privacy leaks
Security experts recommend activating two-step verification and monitoring linked devices to prevent WhatsApp account theft and unauthorized access via WhatsApp Web.
-
[TECHNOLOGY] 14 sourcesWhatsApp and Apple face security threats from zero-click exploits
WhatsApp and Apple face security challenges as zero-click exploits on iOS 16 allow hackers to hijack accounts and impersonate users for extortion. Meta is introducing restricted chats to improve privacy.
-
[TECHNOLOGY] 13 sourcesGlobal rise in diverse fraud methods including WhatsApp zero-click attacks and AI deepfakes
Authorities in Spain, Portugal, and Argentina are warning of rising fraud, including zero-click WhatsApp attacks, AI-generated medical deepfakes, and fake job offers and government impersonations.
-
[TECHNOLOGY] 6 sourcesWhatsApp users targeted by account takeover phishing scams
Fraudsters are using fake WhatsApp voting links for scholarships or Spotify contests to hijack user accounts by tricking victims into providing device linking codes.
-
[TECHNOLOGY] 10 sourcesCybersecurity authorities warn of rising WhatsApp and email fraud
Authorities in Germany and Portugal are warning against rising digital fraud, including WhatsApp impersonation scams, fake contest voting links, and deceptive emails using celebrity likenesses.
-
[TECHNOLOGY] 13 sourcesWhatsApp scams: Authorities warn of zero-click attacks and extortion
Police in multiple regions are warning of new WhatsApp scams, including zero-click account takeovers and extortion via single-view photos, targeting users with outdated software.
-
[TECHNOLOGY] 9 sourcesWhatsApp fraud: Authorities warn of new identity theft and extortion tactics
Authorities in several countries are alerting users to new WhatsApp scams, including identity impersonation, account hijacking that allows simultaneous use, and extortion via the ‘view once’ photo feature.
-
[CRIME] 6 sourcesSergio Lapegüe alerts public to WhatsApp impersonation scam
Journalist Sergio Lapegüe alerted the public after a scammer attempted to defraud him by impersonating his daughter on WhatsApp using her photo and a fake phone number.
Sources
1001web.fr · 5min.at · actu.fr · ad-hoc-news.de · agenciaorbita.org · ahoranoticiasrd.com · akhbarona.com · al-wattan.net · ameve.eu · andreagaleazzi.com · android-mt.ouest-france.fr · androidayuda.com · androidsis.com · askanews.it · bbv-net.de · beobachter.ch · biblestudyguide.com · bierzodiario.es · blog.segurostv.es · borncity.com · cadenadial.com · cadizdirecto.com · caminodesantiago.lavozdegalicia.com · canal44.com · canalcostatv.es · canicattiweb.com · catamarcadigital.com · colombia.com · courage-online.de · cronicadelpoder.com · deia.eus · deshebideshe.com · diariocoimbra.pt · diariocorreo.pe · diariodelnorte.net · diarioellibertador.com.ar · diarioestrategia.cl · diariolucentum.com · digital.t-online.de · djangourmet.com · dnoticias.pt · ebizlatam.com · economistjurist.es · elaconquija.com · elcomercio.pe · elfrontal.com · elnoticierodigital.com · enter.co
This summary has been updated 38 times: see revision history