Madrid
save
WhatsApp, a messaging application that has 2 billion users worldwide, contains a large amount of user information within it. That is why it is not uncommon for cybercriminals to be carrying out more and more attacks to steal accounts. The Spanish National Cybersecurity Institute (Incibe) has alerted through its website on the increase in cases of this type.
“Cybercriminals trick users into providing them with the verification code they have received via SMS with the aim of setting up the account associated with that phone number on another device. Generally, this request is made through a WhatsApp message from a trusted contact of the user, who, in turn, has also been the victim of the theft of their account, “they say from Incibe.
Indeed, the usual way of operating cybercriminals when they try to steal a WhatsApp account is to try trick the victim using social engineering. The goal is for it to share the verification code sent by the “app” by SMS when someone tries to open an account on an unknown device.
During the last months we have seen several versions of this attack. In some, cybercriminals impersonate the technical service of the messaging application and request the code to verify that the user is indeed the owner of the account. Cases have also been seen in which other excuses have been used, such as an alleged raffle won by the victim. As far as Incibe is concerned, criminals have already managed to steal an account and, as a result, have gained access to the user’s contact list. When impersonating a known person, it is easier for us to fall into the trap without realizing it.
How to protect yourself
In order not to fall for this scam, it is important that the user does not share, under any circumstances, the 6-digit verification code sent by the «app»To verify that the user is the true owner of the account. Likewise, two-step authentication must be enabled. When you turn on 2-Step Verification, you have the option to enter an email address. This allows WhatsApp to send you a link to reset your PIN by email in case you forget it and, in addition, it helps to protect your account “, they explain from WhatsApp
The messaging app also remembers that if you receive an email to reset your 2-Step Verification PIN or registration code, but you didn’t make this request, don’t click the link. Someone may be trying to access your phone number on WhatsApp.
See them
comments
– .
