Pakistan’s National Cyber Emergency Response Team (NCERT) has issued a high-level cybersecurity advisory targeting users of WhatsApp Web and the Desktop application on Windows operating systems, with a primary focus on government officials handling sensitive information. Cybercriminals are currently impersonating government departments to launch targeted phishing and malware attacks through WhatsApp messages and emails. Opening any unverified attachment or file can compromise the Windows system, allowing attackers to gain full remote control, steal sensitive files, and capture login credentials.
The advisory also highlights the risk of session hijacking, where attackers gain control of an active WhatsApp Web session to impersonate the victim and propagate malicious files to their contacts. Key indicators of a potential breach include receiving unexpected files from familiar contacts or finding unrecognized active sessions listed under the Linked Devices menu within WhatsApp.
To mitigate these risks, officials managing confidential data are urged to avoid using WhatsApp Web or Desktop on official Windows computers. Users should immediately log out of any suspicious sessions, activate Two-Step Verification, and strictly refrain from opening unverified links or transferring WhatsApp-downloaded files to official systems. Additionally, keeping the operating system, web browsers, and security software fully updated is crucial. In the event of a suspected breach, users must instantly disconnect the device from the internet, preserve system logs as evidence, and avoid interacting with compromised files.
