WhatsApp users are once more being urged to be aware of a nasty scam that hackers are using to try to gain access to your phone.
Although the well-known six-digit code attack was first spotted some time ago, it seems hackers are now bringing it back – meaning your private messages could be at risk of being handed to criminals.
According to the security team at Action Fraud UK, there has been a resurgence in this scam with a number of WhatsApp users informing the service that they have been targeted, Express reports. Irish users should be on alert.
READ MORE: Clever scammers can gain access to your phone through WhatsApp with warning issued
“Action Fraud has received reports relating to a scam that steals access to a WhatsApp user’s account,” the cyber experts stated in a blog post.
How does the scam work?
How exactly does this scam work? Well, hackers will begin the whole attack with an innocent message in WhatsApp chats.
The message will be from a real person who is listed in your contacts who will message to say they have bought a new phone – but have had a WhatsApp security code sent to your device by mistake.
As this happens, your phone will also ping and a six-digit code will be displayed on the screen. The contact will then ask for this unique code.
While all of this seems incredibly harmless it’s actually an elaborate hoax and sending that code will give the crook full access to your chats.
This is because the contact that has messaged you has already been made the victim of the scam, with the hackers using this account to con more people.
The reason they want the code is that this is what WhatsApp sends out when someone wants to access the service from a new device.
Once this is sent, WhatsApp believes that it is a genuine attempt to log in to your account. Then once it is activated the cyber thieves can message your contacts and start conversations, or join group chats.
Using this scam, criminals can easily target friends and family – with the scam often being used to ask for money via transfers. Furthermore, users can find themselves locked out of their own WhatsApp account for hours.
Advice
Action fraud has now released some vital advice that all WhatsApp users should know to avoid becoming a victim of this attack.
What you need to do:
- Set up two-step verification to give an extra layer of protection to your account: Tap Settings > Account >Two-step verification > Enable.
- Think. Call. If a family member or friend makes an unusual request on WhatsApp, always call the person to confirm their identity.
- Never share your account’s activation code (that’s the six-digit code you receive via SMS)
- You can report spam messages or block a sender within WhatsApp. Press and hold on the message bubble, select ‘Report’ and then follow the instructions.
READ NEXT:
Sign up to get political news and analysis from Louise Burne direct to your inbox by clicking here.
