WhatsApp account takeover by code

AvastNews

Share post

The standard version of Messenger WhatsApp should not be used in SMEs for security reasons and data protection. However, many employees do it out of convenience. But be careful with transferred accounts! Avast experts advise.

Everyone knows it, very many have it: the WhatsApp messenger. In addition to entertaining chats with friends and colleagues, completely different activities are possible via the app. Criminals have been using the popular program for several years to take over entire accounts from unsuspecting users.

WhatsApp account takeover by a trick

The trick: hackers are able to take over someone else's account using the verification code that WhatsApp users can request for two-step verification. The prerequisite for this is that someone carelessly shares their code with a third party. Then the takeover of the account begins and the criminal can use his fraudulent method to attack the victim's entire address book while they think they are dealing with a trusted person.

"Regardless of what abuse occurs, the most important lesson is: Never share your personal code via WhatsApp," advises Oliver Kunzmann, security expert and sales engineer manager at Avast. "In addition, everyone who no longer has access to their account should log into WhatsApp again with their phone number."

More at Avast.com

 


About Avast

Avast (LSE: AVST), a FTSE 100 company, is a leading global provider of digital security and privacy products. Avast has over 400 million online users and offers products under the Avast and AVG brands that protect people from threats from the Internet and the evolving IoT threat landscape. The company's threat detection network is one of the most advanced in the world, using technologies like machine learning and artificial intelligence to detect and stop threats in real time. Avast's digital security products for mobile, PC or Mac have been top-rated and certified by VB100, AV-Comparatives, AV-Test, SE Labs and other test institutes.


 

Matching articles on the topic

Report: 40 percent more phishing worldwide

The current spam and phishing report from Kaspersky for 2023 speaks for itself: users in Germany are after ➡ Read more

BSI sets minimum standards for web browsers

The BSI has revised the minimum standard for web browsers for administration and published version 3.0. You can remember that ➡ Read more

Stealth malware targets European companies

Hackers are attacking many companies across Europe with stealth malware. ESET researchers have reported a dramatic increase in so-called AceCryptor attacks via ➡ Read more

IT security: Basis for LockBit 4.0 defused

Trend Micro, working with the UK's National Crime Agency (NCA), analyzed the unpublished version that was in development ➡ Read more

MDR and XDR via Google Workspace

Whether in a cafe, airport terminal or home office – employees work in many places. However, this development also brings challenges ➡ Read more

Test: Security software for endpoints and individual PCs

The latest test results from the AV-TEST laboratory show very good performance of 16 established protection solutions for Windows ➡ Read more

FBI: Internet Crime Report counts $12,5 billion in damage 

The FBI's Internet Crime Complaint Center (IC3) has released its 2023 Internet Crime Report, which includes information from over 880.000 ➡ Read more

HeadCrab 2.0 discovered

The HeadCrab campaign against Redis servers, which has been active since 2021, continues to successfully infect targets with the new version. The criminals' mini-blog ➡ Read more