You may receive a message on WhatsApp from an unknown number stating that you have added us to a new group (a group related to our interests), asking you to send us a code to receive via SMS from WhatsApp; Apparently this activity, according to the contact, is necessary to join the above group.
Attention: This is a classic method used by malicious individuals to take over our WhatsApp account.
How does it work?
The attacker installs WhatsApp on his own device, and when activated, enters our phone number.
To proceed, you must enter the six-digit code sent by WhatsApp to the phone number of the attacker, in this case ours.
The message received actually states:
Your WhatsApp account is registered on the new device
Do not share this code with anyone
Your WhatsApp code: 123-456
Our WhatsApp says that a code has been requested to activate the program on another device, so everything should be clear!
Despite these warnings, with a thousand things to hurry and do, we send this code forward without much thought, and we fall into the trap.
Unfortunately this time the damage was done: our WhatsApp is now in the hands of the attacker with all our contacts, and on our phone, the program seems to be disabled and all our conversations are gone.
This thing is commonly used to further fraud:
The thug pretends to be us and writes to all our contacts from his device, saying that he is in sudden trouble and that he urgently needs money. He can’t answer the phone, but he mentions that he can only use WhatsApp.
And in this case many, perhaps friends, fall into the trap of sending money without asking many questions, relying on the goodwill of known contact.
So how do we protect ourselves from this thing?
We must always pay close attention to what we need! Do not share codes with anyone, these codes are like secret passwords and should be treated as such! And if we do not ask for anything, we must doubt whether we have fallen into the trap of deception.
Having said that, we should be careful even if we get a message from a communicator asking for money in the manner described above: he may be the victim of the fraud described; Let’s contact him in some way (not WhatsApp) and ask him to move accordingly.
Another thing that is important is to always implement two-factor authentication as much as possible. WhatsApp also allows you to do this: we can only set an additional secret code that must be entered on the device to continue the transfer of our account.
Despite these suggestions, we should not be disappointed, we can play the same game as the attacker: we request to activate our WhatsApp on our phone number, which may lead to the account being blocked automatically and we may return to him a few days later.
“Avid writer. Subtly charming alcohol fanatic. Total twitter junkie. Coffee enthusiast. Proud gamer. Web aficionado. Music advocate. Zombie lover. Reader.”