National CERT issues high alert over cyberattacks via WhatsApp Web and email

The National Cyber Emergency Response Team has issued a high alert over possible cyberattacks carried out through WhatsApp Web, the WhatsApp desktop application and email.

The advisory rates the level of threat as high for government officials and for people who have access to sensitive information, and directs them to take special cybersecurity measures.

According to the advisory, attackers are impersonating government officials and departments and using targeted phishing and malware attacks to try to reach sensitive information. It says Windows systems could be infected through harmful files sent under the names of official documents.

Officials said that if a system is compromised, attackers could gain remote control of the computer, steal passwords and reach important data. If a WhatsApp Web session is hijacked, the affected number could be used for fraud and to target more people.

The advisory lists warning signs. An unexpected message or file from a familiar number may indicate an attack, and so may an unknown device appearing in the Linked Devices section of WhatsApp.

It recommends that officers holding sensitive information avoid using WhatsApp Web and desktop on Windows computers. Users are told to end suspicious WhatsApp Web sessions immediately and to verify any unconfirmed link, file or message independently before opening it.

The advisory also says passwords, one-time passwords and verification codes should not be shared with anyone, and files received over WhatsApp should not be moved to official Windows computers. It recommends keeping Windows, browsers and other software updated, and enabling two-factor authentication and WhatsApp two-step verification.

If a device is suspected of being affected, officials say it should be disconnected from the network and internet at once. Related messages and system logs should be kept as possible evidence, and suspicious files or links should not be opened again.