Cyberattacks, WhatsApp hacks, breaches and compromises

How does Sri Lanka match up with regard to responsibilities of individuals, banks, regulators and authorities

- 

SRI Lanka has recently experienced a significant surge in WhatsApp account hacks, with cybercriminals employing deceptive tactics to gain unauthorised access in order to defraud users.

Impersonation of trusted contacts

Attackers often impersonate trusted contacts or professionals, for example, inviting victims to join Zoom meetings related to familiar topics. They then request a verification code, claiming that it is necessary for meeting access. Unbeknownst to the victim, this code is their WhatsApp OTP, sent to the victim by WhatsApp, as a result of the hacker attempting to get into their WhatsApp number from another phone. Sending that OTP grants the hacker control over the victim's account. Once compromised, the hacker may enable two-step verification, making account recovery more challenging.

Call forwarding settings and malicious software

Hackers also manipulate call forwarding settings by tricking users into dialling specific codes. This reroutes calls to the attacker's number, enabling them to intercept verification calls and gain control of the WhatsApp account. Malicious software, often disguised as legitimate apps or links, can monitor WhatsApp messages, contacts, and activities once installed. Hackers distribute such malware through phishing links, fake updates, or unofficial app stores, compromising user privacy.

Exploitation of victim's identity

After seizing control, hackers exploit the victim's identity to solicit money from their contacts. For instance, an article in the Daily Mirror recently, referred to a victim named Bandaranayaka who reported that hackers requested £ 900 from his UK contacts and Rs. 40,000 from those in Sri Lanka. Similarly, former MP Mujibur Rahman's hacked account was used to send messages to his associates, requesting funds and providing bank account details for deposits.

Possible safeguards