Pakistan’s National Cyber Emergency Response Team (NCERT) issued a high-alert cyber security advisory regarding targeted phishing and malware attacks. Cybersecurity officials warned that malicious actors are exploiting WhatsApp Web, WhatsApp Desktop, and compromised email channels to infect Windows systems. According to the advisory, cybercriminals impersonate government officials and state departments to send infected files disguised as official documents. Consequently, opening these malicious attachments can compromise system security, granting unauthorized actors full administrative access to sensitive official data. Therefore, the agency urges all government personnel and citizens to exercise extreme vigilance online.
Read More: Malware attack: PTA asks WhatsApp users in Pakistan to follow advice
The federal cybersecurity agency warned that infected Windows systems allow attackers to execute remote commands, steal saved passwords, and extract confidential records. Furthermore, hackers can hijack active WhatsApp Web sessions and impersonate legitimate users directly through their verified phone numbers. Consequently, compromised accounts can be used automatically to send fraudulent messages and malicious attachments to secondary contacts. The advisory identifies unexpected messages or official-looking files received from known contacts as primary indicators of targeted cyber attacks. Furthermore, unrecognized entries appearing under WhatsApp’s linked devices tab strongly indicate unauthorized account access.
In response to these persistent threats, NCERT advised officials handling sensitive information to refrain completely from using WhatsApp Web on Windows computers. Furthermore, users are urged to terminate suspicious browser sessions immediately and independently verify unexpected attachments before opening them. The agency reiterated that users must never share account passwords, one-time passwords, or verification codes under any circumstances. Additionally, transferring media files received through instant messaging platforms onto official government computers remains strictly prohibited. Consequently, strict compliance with basic digital hygiene protocols remains essential to safeguarding institutional network infrastructure.
To enhance digital defenses, the cybersecurity authority recommends maintaining updated operating systems, web browsers, and enterprise security software. Furthermore, users must enable mandatory multi-factor authentication across official accounts and activate WhatsApp’s native two-step verification feature. In the event of suspected system compromise, users should immediately disconnect affected devices from local internet networks. Furthermore, system administrators should preserve suspicious messages and technical system logs to assist cybersecurity forensic investigations. Consequently, technical support teams remain on high alert to contain potential network intrusions across public sector institutions.
Read More: WhatsApp warns its users about a serious crashing virus
Cybersecurity experts emphasize that human error remains the primary entry vector for sophisticated social engineering and spear-phishing campaigns. Therefore, public and private organizations are actively organizing digital awareness workshops to train staff on recognizing malicious emails. Meanwhile, federal agencies continue monitoring network traffic to identify host IP addresses associated with known cybercrime syndicates. Authorities confirmed that protecting critical national information infrastructure remains a top national security priority amidst rising cyber threats. Ultimately, continuous system updates and strict password management protocols provide essential protection against evolving digital risks.