WhatsApp Phishing: QR Code Scam Exposed

WhatsApp Phishing Using QR Codes

A recent spear-phishing campaign by the Russian hacker group Star Blizzard targets WhatsApp users by exploiting QR codes. The attackers send emails posing as US Government Officials, inviting recipients to join a WhatsApp group supporting Ukrainian NGOs. The initial QR code is intentionally broken, prompting the target to request a new one. The second QR code, when scanned, links a new device to the victim's WhatsApp account, allowing the hackers to access messages, Sensitive Data and Send Money using WhatsApp to Hacker's bank accounts. Watch this educational video on WhatsApp below:

This Educational Video on WhatsApp explains the various methods used by Cyber Criminals to hack your WhatsApp. Install Malwarebytes_Premium in your Mobile Phones, PC, Laptops and Tabs, Windows, MAC, Android and iOS, to safeguard yourself from falling victim to these hackers, as Malwarebytes Premium can Detect and Remove Malware, before they can do any harm.

How WhatsApp QR Code Phishing Attack Works

1. Initial Contact: You might receive an email or message from someone pretending to be a trusted entity, such as a government official or a well-known organization. This message will often seem urgent or highly relevant to you.

2. Invitation: The message will typically invite you to join a WhatsApp group or participate in an event by scanning a WhatsApp QR code. This code might be presented as part of the invitation.

3. Broken QR Code: When you scan the QR code with your WhatsApp app, it is intentionally designed to be faulty or not to work properly. This is part of the scam to make you believe you need another WhatsApp QR code.

4. Request for a New QR Code: Because the first QR code doesn’t work, you might reach out (as suggested in the initial message) to get a new QR code.

5. Second QR Code: The attackers then send you a second QR code. This one is actually the malicious QR code.

6. Scanning the Malicious WhatsApp QR Code: When you scan this second QR code, it’s designed to link a new device to your WhatsApp account. WhatsApp allows linking multiple devices to the same account, which the attackers exploit.

7. Account Compromised: With their device now linked to your account, the attackers can access all your WhatsApp messages, contacts, and any other personal information you’ve shared. They can even steal all your money from your bank accounts in case you have enabled WhatsApp payments.

8. Data Exploitation: The attackers might read your messages, collect sensitive information, or even use your account to send phishing messages to your contacts, spreading the attack further. This is very dangerous trend you should understand.

Preventing WhatsApp QR Code Phishing

This video explains the few steps you should take to safeguard your WhatsApp, to prevent a WhatsApp Phishing happening to you. Here are the key steps to prevent falling victim to a WhatsApp QR code phishing scam:

1. Be Skeptical of Unexpected Messages

• Verify the Sender: If you receive a message or email inviting you to join a WhatsApp group or scan a QR code, double-check the sender. Look for any signs that the message might be from an unfamiliar or suspicious source.

2. Don’t Trust Unverified QR Codes

• Be Cautious: QR codes are like links—treat them with caution. Avoid scanning QR codes from unknown or untrusted sources, especially if they come unexpectedly.

3. Verify QR Codes

• Double-Check: If you receive a QR code from a familiar source, confirm with the sender via a different communication method (like a phone call or a separate message) to make sure it’s legitimate.

4. Enable Two-Step Verification on WhatsApp

• Extra Security: Go to WhatsApp settings and enable two-step verification. This adds an extra layer of security to your account by requiring a PIN in addition to the QR code scan.

5. Stay Updated

• Educate Yourself: Keep yourself informed about the latest phishing techniques and scams. Awareness is a powerful tool in preventing attacks.

6. Be Wary of Broken QR Codes

• Don't Request New Ones: If a QR code you receive doesn't work, be cautious about requesting a new one. Scammers might use this tactic to trick you into scanning a malicious QR code.

7. Check Linked Devices

• Monitor Your Account: Regularly check the list of devices linked to your WhatsApp account. You can find this in the WhatsApp settings under “Linked Devices.” If you see a device you don’t recognize, remove it immediately.

8. Report Suspicious Activity

• Notify WhatsApp: If you suspect a phishing attempt, report it to WhatsApp. They can provide further guidance and take action to prevent further attacks.

9. Install Security Software

• Use Antivirus: Ensure you have reputable security software like Vipre_Antivirus installed on your device. This can help detect and prevent phishing attempts and other malicious activities.

By following these steps, you can significantly reduce the risk of falling victim to a WhatsApp QR code phishing scam. Stay vigilant and protect your personal information!

This video explains the capabilities of Vipre_Antivirus_Software. Vipre does all the Core Functions a big antivirus software performs, but without slowing down your device and no bloatware.

Vipre Antivirus Software

Benefits of Vipre Antivirus

Highest Rated Protection. VIPRE consistently earns top ratings from the world’s most widely-trusted independent antivirus testing authorities.

Advanced Security. Vipre antivirus defends against ransomware and other emerging threats, viruses, Trojans, rootkits, exploits, spyware and more, for peace of mind that is truly priceless.

Firewall Protection. Vipre Firewall protects against incoming and outgoing Internet traffic quickly and easily with customizable settings for advanced users.

Email Security. Vipre antivirus protects against malicious links and infected attachments to keep you safe from online threats spread by email.

Easy to Use. Quickly select or schedule scans in Vipre, check for current definition updates, customize how patches are applied and much more.

U.S.-Based Support. VIPRE is proudly made and supported in the United States with an award-winning customer service team at the ready to help you when you need it most.