
WhatsApp Users Warned As Broken Link Account Hackers Strike
In a recent report, Microsoft has warned users to beware of broken link attacks, which have been used by hackers to compromise WhatsApp accounts. According to the report, the hack was carried out by a Russian hacking group known as Star Blizzard.
The attack works by sending phishing emails to high-value targets with QR codes that supposedly direct them to join a WhatsApp group. However, when users scan these codes, they are instead taken to a broken link. This prompts them to send a comment about the broken link, which allows the hackers to send another link and gain control of the user’s account.
To avoid falling victim to this hack, Microsoft recommends hovering over links before clicking on them and unshortening URLs if necessary. Additionally, users should scrutinize website prompts and verify the identity of senders through alternative means of communication.
It is worth noting that the initial Star Blizzard attack campaign has terminated, but it does not mean that other threat actors will not adopt similar tactics in the future.
In a separate report by Malwarebytes, researchers advise WhatsApp users to be cautious when receiving QR codes. They recommend verifying the authenticity of senders and ensuring that prompts on devices match expectations.
Source: www.forbes.com