More and more people are finding that they have lost access to their WhatsApp accounts because they have been stolen by criminals who are demanding a ransom to get them back.
See also: WhatsApp: Allows users to hide their location
Lester Kiewit talks to Leon Hannibal, head of research at Wolfpack Information Risk, about the exploitation of WhatsApp numbers by criminals for “kidnapping” attempts. He also provides invaluable insights on protecting yourself and how to stay safe.
Hannibal says that the cross-border criminal space is growing and WhatsApp “hijacking” for ransom is becoming a popular modus operandi for cybercriminals, who act in collaboration to target people with less technical expertise.
Hannibal says these criminals use social engineering or targeted attacks to steal your account, as all they need is your number.
Another way criminals can break into your account is through malware that specifically links to service . One way to protect yourself is to change the default password you use to access your voicemail so that the attacker can't use it while you're asleep — yes, this is possible even if your phone is off, according to Hannibal.
See also: WhatsApp: Confirms plans for ads but not in the inbox
Hannibal says you can recover your account by registering your number on WhatsApp – but if the hacker enabled two-factor authentication, it makes it a little difficult.
But if hackers managed to break the two-factor authentication system, then you'll have to recover your account with an SMS code to unlink them. Then, you'll have to wait seven days before you can verify your account again.
As a general rule, do not accept, forward, or respond to requests for codes from unknown numbers.
One of the main signs that someone may be a victim of WhatsApp account hijacking is receiving an unexpected message from an unknown sender. Typically, this message will contain threats and demands for money. Another sign is losing control of their WhatsApp account. If someone notices that they cannot send or receive messages, or if they notice changes to their account settings, this may indicate that their account has been compromised.
Additionally, a ransom demand via WhatsApp is another sign. Kidnappers will threaten the victim and use information they have obtained to convince them to pay the ransom. Payments are usually requested via electronic methods such as Bitcoin to make it difficult to trace them.
See also: WhatsApp: How to block an unwanted number?
Finally, the lack of communication with the victim is another sign. Kidnappers may restrict the victim’s access to the internet or phone, making it difficult to communicate with friends and family. This can raise concerns and indicate that someone is being held for ransom.
It is important to be cautious and confirm the authenticity of messages we receive on WhatsApp. If there are suspicions of a breach of the account, we should contact the security authorities and follow their instructions.
Source: 947.
