A new and more sophisticated WhatsApp scam is circulating globally, raising alarm among cybersecurity experts and law enforcement agencies. Unlike previous job offer scams and phishing messages, this latest fraud uses a more covert technique—hiding malicious software inside images sent via the popular messaging platform.
The scam begins innocuously. Victims receive a message from an unknown number, often starting with a simple “hi” or a “good morning” accompanied by a photo. While the image appears harmless, it may contain hidden malware embedded using steganography—a method of concealing code within digital media. Once the image is downloaded, the malware activates silently in the background.
Experts warn that this malware can grant remote access to a user’s phone, allowing hackers to steal personal data, including one-time passwords (OTPs), banking information, messages, and even control device functions. “It’s particularly dangerous because it doesn’t require users to click suspicious links or download unfamiliar apps,” said a cybersecurity analyst based in Singapore. “A simple image download is enough to compromise your device.”
This marks a shift in tactics by scammers who have previously relied on more obvious ploys, such as fake job offers or impersonating family members in need. Authorities caution that the stealthy nature of the scam makes it harder for users to recognize danger until it’s too late.
To protect themselves, WhatsApp users are being urged to take several precautions:
-
Disable automatic media downloads: This can be done through WhatsApp settings, giving users control over which images and videos are saved to their device.
-
Avoid interacting with unknown numbers: Users should ignore messages from unfamiliar contacts, particularly those that send unsolicited images or attachments.
-
Keep software up to date: Installing the latest security updates can help patch vulnerabilities that malware might exploit.
-
Use reputable antivirus software: Installing and regularly updating antivirus tools on smartphones adds an extra layer of defense against malware.
As messaging platforms like WhatsApp become more central to daily communication, they are also becoming a preferred target for cybercriminals. Experts emphasize the need for heightened awareness and digital hygiene. “With the right precautions, most users can avoid falling victim to such schemes,” the analyst added.
Authorities are urging anyone who believes they’ve been targeted or infected by such scams to report the incident and avoid further interaction with suspicious accounts.
