WhatsApp Account stealing. If someone asks you for a six-digit code that you have just received on WhatsApp, DO NOT GIVE IT:
The last person you distrust is your mother. If she sends you a message requesting a code because the poor thing has been involved and you give it to her. The next moment, you can no longer use your WhatsApp account. Your mother was not your mother, but a cracker who has impersonated her from her phone number.
For a few months, we have seen
a new form of identity theft arrive: writing to you from the number of your own acquaintances and relatives so that you do not suspect. It
is a chain attack to take over your WhatsApp account and continue the attack by
writing to your contacts, and so on.
It is a very effective method because once someone is impersonated it is much easier to follow the chain and get hold of their contact accounts. We have contracted several people who have been contacted by these attackers.
"I sent you a 6-digit code by mistake. Can you pass it on to me?"
First of all, what is this code they ask of you? In
order to protect your account, WhatsApp sends a push notification when
someone tries to register a WhatsApp account with your phone number. To
keep your account safe, it is important that you do not share the
verification code with anyone.
If you receive this notification without asking for it, it means that
someone entered your phone number and asked for the registration code. If
someone is trying to take over your account, in order to do so, they will require
the verification code that was sent by SMS message to your phone. Without
that code, no user who tries to verify your number will be able to complete the
verification process and use the number on WhatsApp.
What is the trick of these criminals to convince you to give
you that verification code? Posing as one of your trusted contacts. This
was the case of Antonio, to whom one of his friends wrote: "Immediately
afterwards, I fell into the mistake I had just made sense logic says that at
no time should this person have asked me for such a code and I tried to enter
my account again. There I received the message that I no longer had access to
the account because, given how WhatsApp works, an account cannot be used on two
phones at the same time. "
We have many more testimonies along the same lines. The
same attack repeated over and over again that is repeated, apparently, since
August 2020. Once they access your account, they write the same message to all
your contacts.
How to recover a stolen account ... and what do they want when they steal it from you
The next step would be to write an email including the phrase
"Phone stolen/lost: Please deactivate my account" in your message
and your phone number in the full international format, adding the
national prefix. In any case, the first thing we recommend is that
you activate two-step verification.
As for "what are they trying to do with this theft”, cybersecurity specialties, explains that these are "examples of phishing to gain access to the WhatsApp account, and that it ends in spoofing".
Click Here
Your objective can be varied. On the one hand, obtain
a trusted account from which to carry out other attacks, such
as CEO fraud even at more everyday levels. On the other, in a
similar line, to request financial help from close contacts
claiming an extraordinary situation, depending on the
profile of the account obtained.
Further explained by expertise "These actions are usually highly
automated (they are usually bots that communicate with the WhatsApp API to
request the recovery, so as not to go number by number manually), which is why
sometimes it reaches profiles of which it seems that You will not be able to
obtain anything. It would be different if you could make payments directly from
WhatsApp, which is currently not the case."
Comments
Post a Comment