ISLAMABAD – A high-level cyber threat alert has been issued over potential targeted phishing and malware attacks through WhatsApp Web, WhatsApp Desktop and email.
The government officials and individuals handling sensitive information have been identified as being at high risk.
According to an advisory issued by the National Cyber Emergency Response Team, attackers are impersonating government officials and departments to distribute malicious files that could compromise Windows-based systems.
The advisory warned that files disguised as official government documents could infect computers, potentially allowing attackers to gain remote control of devices and steal passwords and sensitive data.
It also highlighted the risk of WhatsApp Web session hijacking, which could enable attackers to impersonate users through their own phone numbers and carry out fraudulent activities.
Receiving unexpected messages or files from known contacts and finding unfamiliar devices linked to a WhatsApp account could indicate a potential cyberattack, the advisory warned.
Recommendations for Government Officials
The advisory recommends that officials handling sensitive information avoid using WhatsApp Web and Desktop on Windows systems.
Users have also been advised to immediately terminate suspicious WhatsApp Web sessions and avoid opening unverified links, files or messages. Any suspicious communication should be independently verified before action is taken.
The advisory further warns users against sharing passwords, one-time passwords (OTPs) or verification codes with anyone.
Security Measures to Prevent Attacks
The National Cyber Emergency Response Team has recommended that WhatsApp files should not be transferred to official Windows computers. Users have also been urged to keep Windows, browsers and other software updated.
Enabling two-factor authentication and WhatsApp’s two-step verification has also been recommended to strengthen account security.
In cases where a system compromise is suspected, users should immediately disconnect the affected device from the network and the internet.