The National Cyber Emergency Response Team (NCERT) has issued a high-alert advisory warning government officials and individuals handling sensitive information about targeted cyberattacks involving WhatsApp Web, desktop applications and email.
According to the advisory, cybercriminals are impersonating government officials and departments to distribute malicious files disguised as official documents. Opening these files could infect Windows systems, allowing attackers to take remote control of devices, steal passwords and access confidential information.
The advisory also warned that attackers could hijack WhatsApp Web sessions and impersonate users, potentially exposing their contacts and private communications to security risks.
Receiving unexpected messages or attachments from familiar contacts may indicate a targeted attack. Similarly, unfamiliar devices appearing in WhatsApp’s linked devices list could signal unauthorised access.
NCERT has advised officials dealing with sensitive information to avoid using WhatsApp Web and desktop applications on Windows systems. Users have also been urged to terminate suspicious linked sessions immediately and verify unexpected messages, links and files through independent channels before opening them.
The advisory further cautioned users against sharing passwords, one-time passwords (OTPs) or verification codes with anyone. It also recommended avoiding the transfer of WhatsApp files to official Windows computers.
To strengthen cybersecurity, users have been advised to keep Windows, web browsers and other software updated and enable two-factor authentication, including WhatsApp’s two-step verification feature.
In cases where a device is suspected of being compromised, users should immediately disconnect it from the internet and other networks. They should also preserve suspicious messages and system logs as evidence and avoid reopening potentially malicious files.
Read also: WhatsApp’s new feature could change how you send messages
