How and why do you need to secure your Whatsapp account TODAY!

We recommend you share this advice with friends and family to help secure their WhatsApp account

Incident 1: WhatsApp account hijack 

This incident impacts a frightening number of people every week across the globe. Though an attacker taking over your account would not have access to your past message history, they will receive all new messages sent to you while they control your account, they also will be able to view your contacts in each of your groups. 

How does it happen? 

By tricking you into sharing the SMS message that WhatsApp sends you when you activate your account on a new phone.

1. They install WhatsApp and enter your phone number on their device.
2. You then get a text with a six-digit code
3. They use a hijacked account of one of your friends to message you and ask for the code, which they say was meant for them.
4. As soon as you do, you lose your account.

You can better secure your WhatsApp account by following these tips:

1. Never share your registration code or two-step verification PIN with others.
2. Set a device pin code.
3. Be aware of who has physical access to your phone. If someone has physical access to your phone, they can use your WhatsApp account without your permission.
4. If you receive an email to reset the two-step verification PIN or registration code but didn't request this, don't click on the link. Someone could be attempting to access your phone number on WhatsApp.
5. Activate the 2-factor authentication under the “Account” option
6. You also need to disable the option to autosave images, audio, videos, documents to your phone’s photo album or gallery, this setting is available under “Storage and Data”

7. While your messages on WhatsApp are end-to-end encrypted in transmission mode and protected by phone security when they’re received or saved, if you use WhatsApp’s option to back up your chat history to either Apple’s or Google’s cloud, these backups are not protected by the end-to-end encryption.
8. One should never click on links that you find fishy. In fact, URL scanners are available on anti-virus and www.VirusTotal.com sites

The WhatsApp platform has seen an increase in an enclosed type of incidents. Users have reported that they receive video calls from unknown numbers, and on answering, the screen shows a video of a nude girl, then the call gets disconnected. Once the call gets disconnected, these cybercriminals send screenshots of the video and ask for money in return. This case is of online cyber sextortion. 

If they don't get the money they desire, these people threaten to upload the screenshots on the internet and make them viral. These scammers use their language skills to trap the "customers" so that they can do sex chat on a video call. They ask for a lumpsum amount from the victim which puts them in financial distress. 

Security tips

It is important not to befriend any strangers via WhatsApp or taking any kind of calls from unknown numbers. A good practice is to disable the Camera for WhatsApp permission. Even if you take a video call, it is advisable to cover your face with a cloth or if you are exposed, just report the entire incident to the police so that they can help.

The messaging platform provides users with options to choose who they want to share their profile photo, about, status, and other details with. It’s a good idea to change the setting to “Contacts only”, including for Groups. This means only phone numbers that are saved on your smartphone will be able to see your profile photo, status, phone number, and auto-delete status as well. 

Deactivate WhatsApp when the phone is stolen or lost 

One should ensure to deactivate the WhatsApp account before someone else hacks it and gets access to all your data. To deactivate the WhatsApp account, go to Settings, delete my account option, enter the phone number, and then click on “Delete my account”. 

Remember to log out of WhatsApp Web 

We often tend to log in to WhatsApp Web at the office and then leave the account open on the desktop. This habit can actually create problems for you. Someone else sitting on the same PC can access all your chats without you even realizing it. It’s a good practice to Logout from WhatsApp Web before leaving the office or moving from the device. It just takes seconds to log in again. 

Lock WhatsApp screen 

Try out the WhatsApp lock screen option. This will ensure no one else can open your WhatsApp account. Just head to the Settings menu, Privacy, and then select the Screen Lock option. This adds an extra layer of security. 

To configure Two-step verification 

Settings, click on Account, Two-step verification, and enable it. WhatsApp also asks you to enter your correct email address. We highly recommend you provide an accurate email address so that you’re not locked out of your account if you forget your PIN.” WhatsApp says, “If you receive an email to disable two-step verification, but didn’t request this, don’t click on the link. Someone could be attempting to verify your phone number on WhatsApp.” 

Mitigation of human error by cyber awareness training must be a key to cyber security in 2021& onwards.