India Blocks WhatsApp Malware Attack, Saves 10,000 Users

The Indian Cyber Crime Coordination Centre (I4C) has successfully blocked a WhatsApp account takeover campaign, protecting over 10,000 Indians from a malware attack. This campaign involved malicious files disguised as account statements and communications from regulatory authorities, which were sent to victims through WhatsApp, SMS, or email.

The Ministry of Home Affairs (MHA) stated that the I4C observed a sharp rise in complaints on the National Cyber Crime Reporting Portal (NCRP) regarding the takeover of WhatsApp accounts. The malicious files used in the attack were compressed (.zip) files with names such as Statement of Account.zip or RBI.zip, which were crafted to resemble routine account statements or urgent notices from regulators.

When the file was extracted and opened on a Windows desktop or laptop, a Trojan was installed, compromising the device and hijacking the victim's active WhatsApp Web session. The compromised WhatsApp account was then misused to automatically circulate the same malicious file to all the contacts and groups of the victim.

The I4C had earlier issued an advisory on June 22 warning citizens about the emerging threat involving regulatory and executive impersonation for WhatsApp account takeovers. The centre has intimated over 58,000 potential victims through SMS in the last 30 days.

The MHA stated that incidents following an identical modus operandi have been reported from several states, including Delhi, Gujarat, Maharashtra, and Rajasthan. The I4C has taken coordinated action, including geo-blocking of command-and-control (C2) servers through the Sahyog Portal, to protect Indians from this campaign.

The blocking of this malware attack is a significant achievement for the I4C, and it highlights the importance of being vigilant when receiving suspicious files or messages. The I4C's efforts have saved over 10,000 Indians from this campaign so far, and it will continue to work to protect citizens from emerging cyber threats.

The Indian government has been actively working to combat cybercrime, and the I4C's actions are a testament to its commitment to protecting citizens from online threats. The centre's advisory and awareness campaigns have helped to educate citizens about the dangers of cybercrime and the importance of being cautious when online.

In conclusion, the blocking of the WhatsApp account takeover campaign is a significant achievement for the I4C, and it highlights the importance of being vigilant when receiving suspicious files or messages. The centre's efforts have saved over 10,000 Indians from this campaign, and it will continue to work to protect citizens from emerging cyber threats.

The success of the I4C in blocking this malware attack has significant implications for India's cybersecurity landscape. It demonstrates the government's commitment to protecting citizens from online threats and highlights the importance of cooperation between government agencies and citizens in combating cybercrime. As cyber threats continue to evolve, it is essential for citizens to remain vigilant and for the government to continue its efforts to protect them.

The I4C's actions have protected not only individual citizens but also corporate networks from the malware attack. The centre's efforts have prevented the spread of the malware, which could have had significant consequences for businesses and organizations.

In the future, the I4C will continue to work to protect citizens from emerging cyber threats. The centre will continue to monitor cybercrime trends and work to educate citizens about the dangers of cybercrime. The I4C's efforts will help to create a safer online environment for all Indians.

Overall, the blocking of the WhatsApp account takeover campaign is a significant achievement for the I4C, and it highlights the importance of being vigilant when receiving suspicious files or messages. The centre's efforts have saved over 10,000 Indians from this campaign, and it will continue to work to protect citizens from emerging cyber threats.