The National Cyber Emergency Response Team (NCERT) has issued a high-alert advisory, warning of targeted phishing and malware attacks through WhatsApp Web, WhatsApp Desktop, and email, cautioning that malicious files could compromise Windows systems and expose sensitive information. In the advisory, the cyber agency stated that attackers are impersonating government officials and departments to send malicious files disguised as official documents.
The notification warns that infected systems could allow attackers to gain remote access, steal passwords, and extract sensitive data. It also cautions that hackers could hijack WhatsApp Web sessions and impersonate users through their own phone numbers, raising the risk of fraudulent messages being sent to their contacts.
This sophisticated method of social engineering poses a significant threat to both individual privacy and organizational security across the country. The advisory identifies unexpected messages or files received from familiar numbers as possible signs of targeted attacks.
Unknown devices appearing in WhatsApp's linked devices list may also indicate unauthorized access. Security experts emphasize that vigilance is the first line of defense against such digital intrusions, especially when dealing with unsolicited attachments that appear to originate from trusted sources.
The cyber agency has advised officials handling sensitive information to avoid using WhatsApp Web and Desktop on Windows systems. Users have also been urged to immediately terminate suspicious WhatsApp Web sessions and independently verify unexpected messages before opening links or files.
By maintaining a skeptical approach to digital communication, users can significantly reduce the likelihood of falling victim to these cyber threats. The advisory warns users against sharing passwords, one-time passwords (OTPs), or verification codes with anyone.
It also recommends against transferring WhatsApp files to official Windows computers. These protocols are essential for maintaining the integrity of sensitive data and preventing unauthorized access to private accounts.
Users have been directed to keep Windows, browsers, and other software updated and enable two-factor authentication and WhatsApp's two-step verification feature. These security layers act as a robust barrier against unauthorized login attempts and help secure accounts even if credentials are compromised.
In case of suspected compromise, users should immediately disconnect the affected device from the internet and other networks, preserve relevant messages and system logs as evidence, and avoid reopening suspicious files, the advisory added. The agency continues to monitor the situation closely to protect the digital infrastructure of Pakistan.