WhatsApp Account stealing. If someone asks you for a six-digit code that you have just received on WhatsApp, DO NOT GIVE IT:


The last person you distrust is your mother. If she sends you a message requesting a code because the poor thing has been involved and you give it to her. The next moment, you can no longer use your WhatsApp account. Your mother was not your mother, but a cracker who has impersonated her from her phone number.

For a few months, we have seen a new form of identity theft arrive: writing to you from the number of your own acquaintances and relatives so that you do not suspect. It is a chain attack to take over your WhatsApp account and continue the attack by writing to your contacts, and so on.

It is a very effective method because once someone is impersonated it is much easier to follow the chain and get hold of their contact accounts. We have contracted several people who have been contacted by these attackers.

"I sent you a 6-digit code by mistake. Can you pass it on to me?"



First of all, what is this code they ask of you? In order to protect your account, WhatsApp sends a push notification when someone tries to register a WhatsApp account with your phone number. To keep your account safe, it is important that you do not share the verification code with anyone.

If you receive this notification without asking for it, it means that someone entered your phone number and asked for the registration code. If someone is trying to take over your account, in order to do so, they will require the verification code that was sent by SMS message to your phone. Without that code, no user who tries to verify your number will be able to complete the verification process and use the number on WhatsApp.

What is the trick of these criminals to convince you to give you that verification code? Posing as one of your trusted contacts. This was the case of Antonio, to whom one of his friends wrote: "Immediately afterwards, I fell into the mistake I had just made sense logic says that at no time should this person have asked me for such a code and I tried to enter my account again. There I received the message that I no longer had access to the account because, given how WhatsApp works, an account cannot be used on two phones at the same time. "

We have many more testimonies along the same lines. The same attack repeated over and over again that is repeated, apparently, since August 2020. Once they access your account, they write the same message to all your contacts.

How to recover a stolen account ... and what do they want when they steal it from you

Some of the previous victims were able to get their account back by requesting another verification code and hastily entering it to regain control of the account. If it doesn't work, the most effective is to contact WhatsApp directly to report the theft.

The next step would be to write an email including the phrase "Phone stolen/lost: Please deactivate my account" in your message and your phone number in the full international format, adding the national prefix. In any case, the first thing we recommend is that you activate two-step verification.

As for "what are they trying to do with this theft”, cybersecurity specialties, explains that these are "examples of phishing to gain access to the WhatsApp account, and that it ends in spoofing".

Click Here


Your objective can be varied. On the one handobtain a trusted account from which to carry out other attacks, such as CEO fraud even at more everyday levels. On the other, in a similar line, to request financial help from close contacts claiming an extraordinary situation, depending on the profile of the account obtained.

Further explained by expertise "These actions are usually highly automated (they are usually bots that communicate with the WhatsApp API to request the recovery, so as not to go number by number manually), which is why sometimes it reaches profiles of which it seems that You will not be able to obtain anything. It would be different if you could make payments directly from WhatsApp, which is currently not the case."


Comments

Popular posts from this blog

SAP and Microsoft want the collaboration application to drive the jump to the cloud

Microsoft Mesh is the platform that Microsoft is creating for a virtual office in augmented reality

New Windows 365. The operating system to the cloud