\n<\/p>\n
ISLAMABAD: The National Cyber Emergency Response Team (NCERT) has issued a high-alert advisory warning of targeted phishing and malware attacks through WhatsApp Web, desktop applications and email, particularly against government officials and individuals handling sensitive information.<\/strong><\/p>\n According to the advisory, attackers are impersonating government officials and departments to send malicious files that can compromise Windows systems. Files disguised as official government documents are being used to infect devices, potentially allowing attackers to gain remote control, steal passwords and access sensitive data.<\/p>\n The advisory warned that attackers could also hijack WhatsApp Web sessions and impersonate users through their own phone numbers, putting contacts and confidential communications at risk.<\/p>\n Receiving unexpected messages or files from familiar numbers may indicate a targeted attack, while unknown devices appearing in WhatsApp\u2019s linked devices list could be another warning sign, the advisory stated.<\/p>\n The NCERT has recommended that officials handling sensitive information avoid using WhatsApp Web and desktop applications on Windows systems. Users have also been advised to immediately terminate suspicious WhatsApp Web sessions and independently verify unexpected messages, links and files before opening them.<\/p>\n The advisory further warned users against sharing passwords, one-time passwords (OTPs) or verification codes with anyone and recommended that WhatsApp files not be transferred to official Windows computers.<\/p>\n Users have been advised to keep Windows, browsers and other software updated and enable two-factor authentication, including WhatsApp\u2019s two-step verification feature.<\/p>\n In case a device is suspected of being compromised, users should immediately disconnect it from the network and the internet. The advisory also recommends preserving messages and system logs as evidence and avoiding reopening suspicious files.<\/p>\n<\/div>\n