Pakistan CERT warns of WhatsApp hacking surge

Pakistan’s national cyber response body, Pakistan Computer Emergency Response Team (PakCERT), has issued a public advisory following a surge in hacking incidents and online fraud targeting WhatsApp users across the country.
In its latest warning, the agency urged citizens to take immediate precautionary measures to safeguard their accounts from cybercriminals. Officials highlighted a growing trend of hackers exploiting unsuspecting users through account takeovers and financial scams.
According to the advisory, users must never share One-Time Passwords (OTPs) or PIN codes with anyone, regardless of how trustworthy they may seem. Cybercriminals often pose as friends, family members, or representatives of legitimate organisations to gain access to sensitive information.
The agency also cautioned against clicking on suspicious links received from unknown numbers, noting that such links are commonly used to compromise accounts. Once access is gained, hackers may use the victim’s account to target others, creating a chain of fraud.
Users have further been advised to verify any financial requests through direct phone calls before transferring money, as scammers frequently impersonate known contacts to solicit funds.
PakCERT strongly recommended enabling WhatsApp’s two-step verification feature, describing it as a crucial “digital shield” that adds an extra layer of protection. This security feature can help prevent unauthorised access even if login credentials are compromised.
The advisory comes amid rising concerns over cybercrime in Pakistan, with authorities emphasising the need for increased awareness and safer online behaviour.
Officials reiterated that adopting simple security practices can significantly reduce the risk of falling victim to digital fraud and help protect personal data and financial assets.

















