Pakistan’s National Cyber Emergency Response Team warns of targeted phishing and malware attacks, urging government officials and individuals handling sensitive information to strengthen digital security.
ISLAMABAD: Pakistan’s National Cyber Emergency Response Team has issued a high-level cybersecurity advisory warning of targeted phishing and malware attacks through WhatsApp Web, WhatsApp Desktop and email, with government officials and individuals handling sensitive information identified as being at high risk.
According to the advisory, attackers are impersonating government officials and departments to distribute malicious files that could compromise Windows-based systems. Files disguised as official government documents have been identified as a potential means of infecting computers.
The advisory warns that a compromised system could allow attackers to gain remote control, steal passwords and access sensitive data. It also highlights the risk of WhatsApp Web session hijacking, which could enable attackers to impersonate users through their own phone numbers.
Officials urged to avoid WhatsApp Web on Windows
The cybersecurity team has recommended that officials handling sensitive information avoid using WhatsApp Web and WhatsApp Desktop on Windows systems.
Users have also been advised to immediately terminate suspicious WhatsApp Web sessions and check linked devices for unfamiliar or unauthorized connections.
The advisory identifies unexpected messages or files received from known contacts as a potential warning sign of targeted attacks. Recipients have been urged not to assume that a message is safe simply because it comes from a familiar phone number.
Attackers may use compromised accounts or impersonation techniques to make malicious messages appear legitimate, increasing the risk that recipients will open harmful attachments or follow dangerous links.
Precautions to prevent malware and data theft
The advisory recommends that users avoid opening unverified links, files or messages and independently confirm the authenticity of unexpected communications before taking action.
Users have also been warned never to share passwords, one-time passwords (OTPs) or verification codes with anyone.
Another key recommendation is to avoid transferring WhatsApp files to official Windows computers, particularly systems used to handle sensitive government information.
The cybersecurity team has further advised users to keep Windows, web browsers and other software updated to reduce exposure to known security vulnerabilities. Enabling two-factor authentication and WhatsApp’s two-step verification feature has also been recommended as an additional security measure.
These precautions are intended to reduce the risk of unauthorized access to accounts, devices and confidential information.
Immediate response recommended for suspected compromise
The advisory outlines steps for users who suspect that their devices have been compromised.
Affected devices should be disconnected immediately from the network and the internet to help limit further unauthorized access or data theft.
Users should also preserve relevant messages and system logs as potential evidence and avoid reopening suspicious files.
The warning underscores the importance of verifying digital communications, monitoring account activity and following security procedures, particularly for government officials and others who handle sensitive information.
The advisory specifically highlights WhatsApp Web, WhatsApp Desktop and email as potential channels for targeted phishing and malware attacks. It urges users to exercise caution with unexpected attachments, verify suspicious communications independently and take immediate action if they detect signs of unauthorized access.
About The Author
