Kaspersky WhatsApp Scam: Hacking via Fake Votes
- Okay, here's a summary of the article, focusing on the key facts about the WhatsApp phishing campaign:
- Kaspersky has identified a new phishing campaign targeting WhatsApp users through fake voting websites.
- * Lure: Users are directed to a webpage simulating a voting competition (often featuring young athletes, but adaptable to other themes).The page creates a sense of legitimacy with...
Okay, here’s a summary of the article, focusing on the key facts about the WhatsApp phishing campaign:
Kaspersky has identified a new phishing campaign targeting WhatsApp users through fake voting websites.
How it works:
* Lure: Users are directed to a webpage simulating a voting competition (often featuring young athletes, but adaptable to other themes).The page creates a sense of legitimacy with vote counters and promises of prizes.
* Redirection: Clicking “vote” or “Allow” leads to a fraudulent page requesting WhatsApp authentication.
* Account Takeover: Victims are prompted to enter their phone number and then a one-time code sent by WhatsApp. The fraudsters exploit this code on a fraudulent website to gain access to the user’s WhatsApp account via the web interface.
* Exploitation: Once logged in, the attackers can spy on the victim, send messages, and fully control the account.
Key Takeaways:
* Be wary of links to voting competitions or similar promotions, especially those received unexpectedly.
* Never enter your WhatsApp verification code on a website you don’t fully trust.WhatsApp will never ask for this code outside of the official app for security reasons.
* the campaign leverages a vulnerability in WhatsApp’s web login process.
The article also mentions a related Kaspersky report showing a 32% increase in cyberattacks in Morocco’s financial sector.