The Presidential Cyber Security Presidency has warned citizens about fraud attempts carried out via WhatsApp and similar messaging applications. The Presidency reported that there has been an increase in complaints regarding account information being compromised and money being requested from the users' close circles.
Technical investigations have determined that malicious software targeting security vulnerabilities, particularly in iPhone devices with outdated iOS operating systems, can be used in such attacks. It was stated that malicious software can infect devices through malicious advertisements, suspicious links, and compromised websites.
According to the Presidency, in some advanced attacks, even just viewing the malicious content can put device security at risk. Attackers who gain unauthorized access to devices can access personal information and messaging accounts, allowing them to perform actions without the account owner's knowledge.
It was reported that messages can be sent to people on the contact list from accounts compromised using this method, citing an "urgent need," and money transfers can be requested by sharing IBAN information. The Presidency emphasized that money requests from acquaintances should also be verified through a different communication channel, preferably by calling them on the phone.
SECURITY RECOMMENDATIONS FOR USERS
Citizens are advised to keep their operating systems and messaging applications up to date. iPhone users are requested to install the latest security updates from Settings > General > Software Update.
The Presidency stated that users should not click on links from unknown sources, including social media advertisements, should not download applications or files from untrusted websites, and should not perform any actions if a suspicious link is opened.
It was also recommended to enable two-step verification on WhatsApp and other digital accounts, not to share verification codes with third parties, and to regularly check the "Linked Devices" section on WhatsApp. It was reminded that unrecognized sessions should be terminated, although in some advanced attacks, unauthorized access may not appear in this section.
It is important for citizens who suspect their account has been compromised to inform their close circle through different communication channels, and to apply to law enforcement units or Public Prosecutor's Offices by preserving digital evidence, including suspicious messages and IBAN information.
If a money transfer has been made, it is recommended to contact the relevant bank without delay. To restore device security, it is advised to reset the phone, install the current operating system version, change all passwords—especially for banking, social media, and email accounts—using a secure device, and enable multi-factor authentication on all possible accounts.
The Cyber Security Presidency stated that it continues its monitoring, analysis, and information activities regarding cyber threats to ensure the safety of citizens in digital environments.
News Source: 12punto
