The National Cyber Emergency Response Team (NCERT) has issued a high-alert advisory warning of potential cyberattacks targeting users of WhatsApp Web, WhatsApp Desktop and email services.
The threat level has been classified as high, particularly for government officials and individuals handling sensitive information.
According to the advisory, targeted phishing and malware attacks are expected to be carried out through WhatsApp Web, desktop applications and email. Cybercriminals are reportedly impersonating government officials and departments to send malicious files to targeted individuals.
The advisory warns that files disguised as official government documents could infect Windows-based systems. Once a device is compromised, attackers may gain remote access, steal passwords and extract sensitive data.
It also cautions that hackers could hijack WhatsApp Web sessions and impersonate users through their own phone numbers.
Receiving unexpected messages or files from familiar contacts could be a warning sign of a targeted cyberattack. Similarly, the appearance of unknown devices in WhatsApp’s Linked Devices section may indicate unauthorised access.
Security recommendations for government officials
The advisory recommends that officials handling sensitive information avoid using WhatsApp Web and Desktop on Windows systems.
It also urges users to immediately terminate suspicious WhatsApp Web sessions and refrain from opening unverified links, files or messages. Users have been advised to independently verify unexpected communications before responding.
The advisory further warns against sharing passwords, one-time passwords (OTPs) or verification codes with anyone.
Officials have also been advised not to transfer WhatsApp files to government Windows computers and to ensure that Windows operating systems, browsers and other software remain updated.
Enabling two-factor authentication and WhatsApp’s two-step verification feature has also been recommended to strengthen account security.
What to do if your device is compromised?
The advisory instructs users who suspect their devices have been compromised to immediately disconnect them from the network and the internet.
They should also preserve suspicious messages and system logs as evidence and avoid reopening potentially malicious files.
The warning highlights growing cybersecurity risks associated with digital communication platforms, particularly for government departments and individuals who have access to confidential information.
