Pakistan’s National Cyber Emergency Response Team (NCERT) has warned of targeted phishing and malware attacks through WhatsApp and email. The agency cautioned that malicious files could compromise Windows computers and expose sensitive information.
The warning specifically highlights risks linked to WhatsApp Web, WhatsApp Desktop and deceptive emails. Attackers reportedly impersonate government officials and departments to make harmful files appear like legitimate official documents.
If users open these files, hackers could gain remote access to their systems, steal passwords and extract confidential data. Moreover, attackers could hijack WhatsApp Web sessions and misuse compromised accounts to contact victims’ friends or colleagues.
How Are Hackers Using WhatsApp to Target Users?
According to the advisory, cybercriminals may disguise malicious files as official documents to convince recipients to open them. These tactics can make suspicious messages appear trustworthy, particularly when attackers impersonate familiar institutions or officials.
The agency also warned that hackers could take control of WhatsApp Web sessions and impersonate users through their own phone numbers. Consequently, compromised accounts could become tools for sending fraudulent messages to contacts.
However, unexpected files do not always come from unknown numbers. The advisory identifies unusual messages or attachments from familiar contacts as potential warning signs of targeted attacks.
Users should also check WhatsApp’s linked devices list for unfamiliar devices. An unrecognised session could indicate unauthorised access and may require immediate action.
NCERT Advises Officials to Avoid WhatsApp Web on Windows
NCERT has advised officials who handle sensitive information to avoid using WhatsApp Web and WhatsApp Desktop on Windows systems. The warning also discourages transferring WhatsApp files to official Windows computers.
In addition, users should independently verify unexpected messages before opening attachments or clicking links. A message that appears to come from a trusted contact or government department should not automatically be considered safe.
The agency has also urged users never to share passwords, one-time passwords (OTPs) or verification codes with anyone. These details can help attackers gain access to accounts or other protected information.
How to Protect Your WhatsApp Account From Malware
Users can reduce their exposure to phishing and malware by following several precautions outlined in the advisory:
- Avoid suspicious attachments: Do not open unexpected files, even when they arrive from familiar numbers.
- Check linked devices: Look for unfamiliar sessions and immediately terminate any suspicious WhatsApp Web connections.
- Verify messages independently: Confirm unexpected requests through a separate, trusted communication channel before responding.
- Protect login details: Never disclose passwords, OTPs or verification codes to other people.
- Update software: Keep Windows, web browsers and other installed software updated.
- Enable extra security: Activate two-factor authentication where available and enable WhatsApp’s two-step verification feature.
These measures can help users strengthen account security and reduce the risk of unauthorised access.
What Should You Do If Your Computer Is Compromised?
If users suspect a malware infection, NCERT advises disconnecting the affected device from the internet and other networks immediately. This step can help limit further unauthorised activity.
Users should also preserve relevant messages and system logs as potential evidence. Furthermore, they should avoid reopening suspicious files, which could expose the system to additional risks.
The warning highlights the importance of treating unexpected digital communications cautiously, particularly when handling sensitive information. By checking attachments, securing accounts and maintaining updated software, users can better protect their devices and personal data.
For the latest updates, visit and follow The Truth International website (www.thetruthinternational.com) and subscribe to the YouTube Channel.
