The National Cyber Emergency Response Team (NCERT) has sounded a high-level alert over targeted phishing and malware campaigns exploiting WhatsApp Web, its desktop application and email to infect Windows systems and potentially expose sensitive data.
The notification warns that infected systems could allow attackers to gain remote access, steal passwords and extract sensitive data.
It also cautions that hackers could hijack WhatsApp Web sessions and impersonate users through their own phone numbers, raising the risk of fraudulent messages being sent to their contacts.
The advisory identifies unexpected messages or files received from familiar numbers as possible signs of targeted attacks. Unknown devices appearing in WhatsApp’s linked devices list may also indicate unauthorised access.
The cyber agency has advised officials handling sensitive information to avoid using WhatsApp Web and Desktop on Windows systems. Users have also been urged to immediately terminate suspicious WhatsApp Web sessions and independently verify unexpected messages before opening links or files.
The advisory warns users against sharing passwords, one-time passwords (OTPs) or verification codes with anyone. It also recommends against transferring WhatsApp files to official Windows computers.
Users have been directed to keep Windows, browsers and other software updated and enable two-factor authentication and WhatsApp’s two-step verification feature.
In case of suspected compromise, users should immediately disconnect the affected device from the internet and other networks, preserve relevant messages and system logs as evidence, and avoid reopening suspicious files, the advisory added.
