Pakistan issues high cyberattack alert for WhatsApp Web and desktop users

ISLAMABAD: The National Cyber Emergency Response Team (NCERT) has issued a high-level alert warning that cybercriminals are targeting government officials and individuals handling sensitive information through phishing attacks and malware distributed via WhatsApp Web, desktop applications and email.

According to the advisory, cybercriminals are impersonating government officials and departments to distribute malware capable of compromising Windows systems.

The malware is disguised as official government documents and sent to users’ devices, potentially allowing attackers to take control of the devices, steal passwords and access confidential information.

The advisory further warned that cybercriminals could hijack WhatsApp Web sessions and impersonate users through their phone numbers.

Receiving an unexpected message or file from a familiar number could indicate a targeted attack. The appearance of unknown devices in WhatsApp’s ‘Linked Devices’ section may also serve as a warning sign, according to the advisory.

NCERT has advised individuals handling sensitive information to avoid using WhatsApp Web and desktop applications on Windows systems.

The advisory urged users not to share passwords, one-time passwords (OTPs) or verification codes with anyone. It also advised against transferring WhatsApp files to official Windows computers.

Users were encouraged to keep Windows, web browsers and other software up to date and enable two-factor authentication, including WhatsApp’s two-step verification feature.

If a device is suspected of being compromised, users should immediately disconnect it from the internet and other networks. The advisory further recommended preserving messages and system logs as evidence and refraining from reopening suspicious files.