Only one thing is impossible for God: To find any sense in any copyright law on the planet.
Mark Twain

WhatsApp accounts getting stolen with this nasty trick: What to do

In April, we saw a WhatsApp vulnerability that let anyone hijack your account if they knew your phone number and could glance at your phone’s screen.

Now it looks like someone has weaponized that WhatsApp flaw to trick you into giving up your account without the attacker ever needing to see your screen.

  • WhatsApp just got killer upgrades — here’s everything that’s new
  • Best chat apps: Keep up to date when you’re on the go
  • New: Cybercrime rife in developed countries, on rise, says new study

This information comes to us in the form of a single tweet by a young man in Paraguay who posted a screenshot of what appears to be a WhatsApp phishing message in Spanish purporting to come from WhatsApp itself.

WABetaInfo@WABetaInfo

New WhatsApp for Android 2.20.173 web release is available now!https://wabetainfo.com/wa-android-web/ 

WhatsApp Messenger for Android | WABetaInfo

WhatsApp Messenger for Android (Web Release) page.

wabetainfo.com

Dario Navarro@Darionavarro_

Hey, help me. What is this? It is real?

View image on Twitter
15 people are talking about this

We can’t verify that the message is real, and we haven’t heard of any other incidents involving this scam, but the attack method makes sense and it would be pretty easy for an attacker to pull off.

Our Spanish is pretty rusty, but thanks to our collegue Kate Kozuch and also Google Translate, the message claims to be from the “WhatsApp support team” and states that someone has registered a WhatsApp account using your phone number.

The message goes on to say that the recipient has been sent “a request for identity verification” using SMS.

A standard feature of WhatsApp’s two-factor-authentication (2FA) method for preventing account theft is to send the account owner a six-digit one-time use code to the older phone number to verify that the account owner has indeed requested a number change or is moving the WhatsApp account to new phone.

The problem, as we reported in April, is that the texted 2FA code will by default display on the old phone’s screen, locked or not. Anyone who can watch your screen in the few seconds after requesting the (phony) number change or device change will be able to steal your account.

How to avoid this scam

Fortunately, as we explained in April, it’s pretty easy to avoid falling victim to this scam. You need only to add a PIN to your WhatsApp account.

Go into the WhatsApp settings on your phone, tap Account and then tap Two-Step Verification. You’ll then have to create a six-digit PIN, which you will be asked to enter if you move your WhatsApp account to a new phone.

No need to see your screen

This new twist reported by the man in Paraguay eliminates the need for the attacker to see your screen, since the attacker is going to trick you into giving him the code yourself.

The message quickly veers into pure scam territory, stating that “If you fail to pass the verification or abandon the attempt, an indefinite suspension will be generated.”

That’s a classic confidence-scheme call to action, threatening you with denial of service unless you act now. In reality, WhatsApp would not suspend your account for not verifying a change request.

The original poster didn’t post the entire message, but the implication is that you’ll be asked to forward the one-time 2FA code to the message sender. If so, then the message sender will be able to hijack your WhatsApp account.

“This is #FAKE,” wrote the WABetaInfo Twitter account, to which the original Paraguayan poster had appealed for help. “WhatsApp doesn’t message you on WhatsApp, and if they do (for global announcements, but it’s soooo rare), a green verified indicator is visible. WhatsApp never asks your data or verification codes.”

WABetaInfo@WABetaInfo

This is . WhatsApp doesn’t message you on WhatsApp, and if they do (for global announcements, but it’s soooo rare), a green verified indicator is visible.
WhatsApp never asks your data or verification codes.@WhatsApp should ban this account. 😅 https://twitter.com/darionavarro_/status/1265596184242139136 

Dario Navarro@Darionavarro_
Replying to @WABetaInfo

Hey, help me. What is this? It is real?

View image on Twitter
58 people are talking about this

Leave a Reply

Your email address will not be published. Required fields are marked *

Select your currency
USD United States (US) dollar
EUR Euro

Customer Reviews

Fone Gadgets Zone

Customer Care

Sérgio Paz 01/29/20

Facebook
Site valioso, onde você pode encontrar o que está procurando, mas precisa distintamente e ciente das especificações da ferramenta que deseja, caso contrário, você terá um problema com os serviços de atendimento ao cliente médios.

William Cummings 05/21/20

Google review
So happy with my laptop works brilliant. Was fast delivery too. Really happy.

Cauã Bonfim 03/12/20

Facebook
Eu comprei muitas coisas neste site. É bom.

Daniel Aboud 06/1/20

Google review
I have bought numerous items from Fone Zone during COVID and I have been really pleased with the reliability.

Jessica Ankisha 09/23/18

Google review
Absolutely cannot fault their services. On time- every time and items are delivered safely and always with a smile

Vitória Lima 05/26/20

Facebook
Wow, ¡qué gran experiencia tuve con ustedes! Pedí un iPhone de Brasil y estoy muy impresionado con el envío rápido, el producto en sí y el regalo Apple Watch que vino con él. Fue muy agradable ver un toque tan personalizado.

Ryan 28/03/19

Google review
Not sure why there rating is so low on here. They always go above and beyond if there is an issue and I would say they are the best company to deal with online 5 star

Lia Serrano 11/06/19

Facebook
Muy buen servicio tiempos de entrega rápidos

Kamila Beblot 07/22/19

Google review
I use Fone Zone for years now and never had any issues, I always found customer service very good. However this time everything changed. I ordered a little Samsung for my sons birthday specifically. Was waiting for over a week for it to be dispatched but noticed nothing was happening. I contacted Fone Zone to check up on it the day before it was due to arrive and they email me that my order was cancelled due to stock availability.

Celia Rivera 03/21/19

Google review
Muy buen servicio al cliente. Nunca hay problemas.
Read more...
Need Help? Chat with us