The telecommunications company Entel warned its collaborators about reports indicating the theft of accounts of the popular messaging application WhatsApp.
–
On how this attack would operate, he noted that sand send messages impersonating a known contact, requesting the verification code that is received by text message (even, in some cases, receiving a call from the same contact on WhatsApp). The biggest problem arises here, since By sending this code, access is given to the application and, therefore, the door is left open for strangers to perform actions using the app and deceiving the contacts of the user whose security was breached.
While At the moment, the malicious or criminal use of the stolen information has not been disclosed -Nor in cases that occurred with other mobile operators-, the company made a series of recommendations to avoid delivering critical information, especially to avoid the physical access of strangers to personal computers, not to enter the links attached in the text messages, and enable 2-step verification for the app.
–