Police issue warning on WhatsApp attacks

Authorities have sounded the alarm over a spike in cyberattacks, urging the public to exercise caution when using digital platforms such as WhatsApp. Cybercriminals are deploying sophisticated tactics to deceive users into providing sensitive information, often leading to account takeovers and financial loss.

The attackers commonly lure victims by sending messages from unknown or foreign numbers, enticing them to click on fraudulent links. Once clicked, these links grant hackers access to personal and financial information. The consequences range from stolen bank details to extortion attempts targeting family and friends.

National police spokesperson, Commissioner Paul Nyathi, highlighted the severity of the issue during an interview, emphasizing the critical need for public awareness. "There is a rampant cyberattack targeting senior Government officials, media personnel, and people across the country, where messages are sent from unknown numbers, usually foreign numbers. The moment you click on a link, you will be hacked," he explained.

These cyberattacks primarily rely on phishing, a method where victims are tricked into revealing confidential information through deceptive messages. The criminals exploit vulnerabilities in human behaviour and software systems, often presenting urgent or convincing scenarios to manipulate their targets.

Commissioner Nyathi stressed the importance of ignoring messages from unfamiliar contacts and refraining from clicking suspicious links. "The public should desist from opening links from unknown sources, and as the police, we are using resources at our disposal to flush out these suspects," he added.

Victims frequently report scenarios in which scammers take over messaging accounts and reach out to their contacts with fake emergencies. On WhatsApp, hackers send urgent messages pretending to be the account owner, claiming they are in a crisis and need financial help. Similar tactics are employed on platforms like Facebook, where fraudsters contact the victim's friends.

One notable case involved a top Government official whose account was hacked. The scammers sent messages to the official's contacts, requesting financial assistance under false pretenses. "I'm trying to send some money to someone for treatment; it's not going through. I have issues with my account; can you help me send it to the person's account directly? I will refund it back immediately once my transfer is active," read one such message.

Despite suspicions raised by some recipients, others fell victim, with two individuals reportedly losing money, one sending US$250 and another transferring ZiG500.

The police revealed that these cybercriminals often use stolen identity documents to register new SIM cards, making it difficult to trace them. Many also rely on foreign numbers to bypass local detection mechanisms.

Hackers have devised additional techniques to compromise accounts. For instance, some exploit the "WhatsApp Forward Call" feature to intercept incoming calls. Victims are tricked into dialling a specific number that activates call forwarding to the hacker's line. With this access, the attackers install WhatsApp on a new device, register the victim's number, and request a verification code via phone call, ultimately seizing control of the account.

Messages promising free data, lottery winnings, or access to leaked videos are also common traps used by scammers. Clicking on such links not only exposes users to phishing but can also compromise the security of their accounts.

The police continue to investigate these cybercrimes, but they have called on the public to remain vigilant. Awareness and caution are key to preventing further victimisation. Individuals are urged to report suspicious activity and avoid engaging with unknown numbers or messages. As the digital landscape evolves, so too does the need for heightened cybersecurity practices.