New WhatsApp scam allows access without removing user
The National Police has detected a sophisticated fraud where cybercriminals operate from WhatsApp accounts without the victim losing access. The attack primarily affects devices with outdated iOS.
Remote fraud on WhatsApp without user removal
The National Police has identified a significant increase in WhatsApp fraud cases where attackers manage to operate from the victim's account without them losing access to the application, according to atresmedia.com. Unlike traditional account takeover, where the user is removed after the interception of an SMS code, this method allows the criminal to request urgent money from contacts using the real phone number and profile picture of the affected person.
The National Institute of Cybersecurity has determined that the breach is exploited remotely on devices with outdated iOS versions that lack the latest manufacturer protections. The victim usually only finds out about the incident when friends or family alert them to transfer requests of around €1,000.
How the attack works
The procedure begins with a social engineering message or malicious link that prompts interaction with a cloned interface. Through this deceptive interaction, attackers authorise a new device on the account via WhatsApp's multi-device protocol. As the process is completed without forcing disconnection of the original phone, cybercriminals operate without the user noticing any obvious anomalies.
Once access is established, the intruders use the conversation history and communication patterns to impersonate the identity to acquaintances and work groups. They issue urgent requests for transfers or sending of verification codes. Since the account remains active on the original device, responses from contacts can be intercepted or deleted remotely, making it difficult for the user to notice the manipulation in time.
Protection measures
Security forces recommend carrying out regular audits within the application to verify open sessions and identify unauthorised access. iPhone users should regularly check what devices are connected to their WhatsApp account and disconnect any unknown sessions. Additionally, it is advisable to keep the operating system updated with the latest manufacturer protection solutions, enable two-factor authentication on WhatsApp, and avoid clicking on suspicious links or downloading files from unknown senders.
Source: Google News ES — Crime (es)