[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 2 sources · 30 days · First seen · Last updated

WhatsApp-targeted phishing and malware attacks

Overview

A series of sophisticated cyberattacks has targeted WhatsApp users through various social engineering and technical methods. In Kosovo, attackers utilized “Ghost Pairing” and the “Linked Devices” feature to hijack business and private accounts, primarily affecting users on the Telekomi i Kosovës (Vala) network. These attackers used compromised profiles to solicit financial favors or emergency assistance from contacts.

In Pakistan, the National Cyber Emergency Response Team (NCERT) issued an advisory regarding attacks specifically targeting WhatsApp Web and desktop users on Windows systems. In these instances, attackers impersonate government officials to distribute malicious files disguised as official documents. These files are designed to grant remote device control, steal passwords, and access sensitive data.

In both regions, cybersecurity authorities have recommended that users enable two-step verification, monitor linked devices, and exercise caution with unsolicited files or requests.

Entities

WhatsApp · Pakistan · Democratic League of Kosovo · Telekomi i Kosovës · KOS-CERT

Timeline

  1. [TECHNOLOGY] 2 sources
    Pakistan issues high-level cyberattack alert for WhatsApp users

    Pakistan's NCERT has issued a high-level alert warning that hackers are using WhatsApp Web and desktop to target Windows users with malware disguised as official government documents.

  2. [TECHNOLOGY] 8 sources
    Kosovo WhatsApp accounts targeted by sophisticated cyberattack wave

    Cyberattackers in Kosovo are targeting WhatsApp business and private accounts using phishing and social engineering, prompting KOS-CERT to issue urgent security recommendations for users.

Sources

arynews.tv · en.dailypakistan.com.pk