Pakistan Issues High Alert Over Cyberattacks Through WhatsApp Web and Email

Pakistan’s National Cyber Emergency Response Team (National CERT) has issued a high-alert advisory warning of targeted phishing and malware attacks through WhatsApp Web, WhatsApp Desktop and email. Government officials and people handling sensitive information face the highest risk.

The advisory, listed as No. 22 on the agency’s official website, warns that attackers impersonate government officials and departments to send malicious files disguised as official documents. Opening these files can infect Windows computers, allowing hackers to remotely control systems, steal passwords and access confidential data.

Attackers may also hijack WhatsApp Web sessions and use victims’ phone numbers to impersonate them and target their contacts. Unexpected files or messages from familiar numbers and unknown devices in WhatsApp’s “Linked Devices” list may indicate an attack.

Security Measures Recommended

National CERT has advised officials handling sensitive information to avoid WhatsApp Web and Desktop on Windows computers. It has also urged users to:

• Avoid opening suspicious files, links or unexpected messages, even from known contacts
• Verify unusual requests through a separate, trusted communication channel
• Avoid transferring WhatsApp files to official Windows computers
• Enable two-factor authentication and WhatsApp two-step verification.
• Keep Windows, browsers and other software update
• Never share passwords, one-time passwords (OTPs) or verification codes
• Check WhatsApp’s “Linked Devices” section and immediately log out unfamiliar or suspicious sessions

If a computer is suspected of being compromised, users should immediately disconnect it from the internet and other networks. They should preserve relevant messages and system logs as evidence and avoid reopening suspicious files or links.

The advisory urges government departments and individuals with access to sensitive information to follow these precautions to reduce the risk of data theft and unauthorized access.