Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [ACTIVE] · [TECHNOLOGY]
4 clusters · 5 sources · 50 days · First seen · Last updated
Zalo messaging application security and data management
Overview
Information regarding the Zalo messaging application has focused on user security and data management.
Initial reports highlighted cybersecurity risks, warning users of signs that their accounts may be under remote surveillance. Indicators of unauthorized access include sudden logouts, notifications of access from unfamiliar devices or IP addresses, and unexpected requests to synchronize message history.
Recent updates have expanded on these indicators, noting that users may observe messages appearing as ‘read’ before being opened, or messages being deleted or recalled unexpectedly. Users are also advised to monitor the account’s active device list for unrecognized hardware.
Because Zalo accounts frequently contain sensitive information, such as work communications, identification documents, and banking details, they are considered frequent targets for scammers. If an account is compromised, unauthorized users may utilize the platform to send malicious links or fraudulent loan requests to the victim's contacts. To manage security, users are encouraged to use the ‘Account and Security’ section within the app to identify and log out unrecognized devices.
Subsequent information addressed data loss and recovery, noting that users may be able to recover deleted messages, images, and videos if backups exist. Data loss is often attributed to logging into new devices, reaching storage limits, or the use of third-party cleaning software.
Newer guidance from the Hue City Police emphasizes responding to automated security alerts such as ‘Are you the one logging in?’ or ‘Did you just log in?’. If these prompts are unrecognized, users should select ‘Security Check’, then ‘Not me’, and utilize ‘Block now’ or ‘Log out immediately’ to secure the account. Risks often stem from failing to log out of public devices, losing access to registered contact information, or interacting with malicious links.
Entities
Timeline
-
[TECHNOLOGY] 3 sourcesZalo users warned to monitor security alerts for unauthorized access
Zalo users should monitor security alerts regarding unrecognized logins to prevent account theft and unauthorized remote monitoring.
-
[TECHNOLOGY] 4 sourcesZalo users warned of signs of remote account monitoring
Zalo users can detect unauthorized account access by monitoring for unread messages marked as read, unexpected deletions, and unrecognized devices in their login history.
-
[TECHNOLOGY] 2 sourcesZalo data recovery methods for deleted messages and media
Users can recover deleted Zalo messages and media if backups exist, though data loss often occurs due to device switching, storage limits, or automated cleaning software.
-
[TECHNOLOGY] 5 sourcesZalo users warned of remote account monitoring signs
Zalo users are advised to watch for signs of account compromise, such as unexpected logouts, unfamiliar login alerts, or unauthorized requests to synchronize message history.
Sources
cafebiz.vn · cafef.vn · genk.vn · kenh14.vn · soha.vn
This summary has been updated 2 times: see revision history