Government officials and people handling sensitive information face a risk of cyberattacks through WhatsApp Web, desktop applications and email, the National Cyber Emergency Response Team (NCERT) has warned in a high-alert advisory.
As per the details, the advisory identified the use of fake government communications to deliver malicious files to Windows users and said that attackers pose as officials or government departments to make these files appear legitimate.
The same, however, potentially give the attackers the access to infected devices, passwords and confidential information, it added.
The warning also covers attempts to take over WhatsApp Web sessions. Attackers could use hijacked sessions to impersonate account holders through their own phone numbers, putting their contacts and private conversations at risk.
The NCERT has urged officials who handle sensitive information to avoid accessing WhatsApp Web and desktop applications on Windows systems.
Users should also check their linked devices for unfamiliar entries and end any suspicious sessions immediately.
Messages and attachments from known contacts may also require caution, particularly when they arrive unexpectedly, the advisory stated. Users should verify unusual requests, links and files directly with the sender before opening them.
The team has also warned against disclosing passwords, one-time passwords (OTPs) and verification codes to anyone. It has advised users not to transfer WhatsApp files to official Windows computers.
While keeping Windows, browsers and other software updated is among the recommended precautions, the advisory also calls on users to enable two-factor authentication and activate WhatsApp’s two-step verification feature to help protect their accounts.
Anyone who suspects that a device has been compromised should disconnect it from the internet and other networks immediately.
The advisory also recommends retaining relevant messages and system logs for evidence and to avoid opening suspicious files again.
