Saturday, Jan 28, 2023

WhatsApp attack: 'Tens of thousands' fall victim to Russian voice message ambush

WhatsApp attack: 'Tens of thousands' fall victim to Russian voice message ambush

A phishing attack designed to look like a WhatsApp voice message has already compromised tens of thousands of email accounts.

The tried-and-tested attack method appears to be a harmless email containing a link to a WhatsApp voice message.

But anyone clicking on the link is taken to a malicious website that attempts to install a virus on the victim’s device.

Cyber security researchers at California-based Armorblox report that nearly 28,000 mailboxes – across both Gmail and Microsoft’s Outlook program have been impacted by the ambush.

More worryingly, the company says the email attack comes from a valid Russian-based domain.

The experts say the ‘,’ domain is associated with an organisation known as the ‘Center for Traffic Safety of the Moscow Region’ – which is a part of the Russian Ministry of Internal Affairs.

The phishing email contains the subject line ‘New Incoming Voicemessage’ and is supposedly from a WhatsApp Notifier function.

The fake WhatsApp email containing a dangerous link

The security researchers say that, although it looks authentic, it’s actually a trick.

‘Upon clicking the “Play” link in the email, recipients were redirected to a page that attempts to install a trojan horse JS/Kryptik,’ explained Lauryn Cash from Armorblox.

‘This is a malicious obfuscated JavaScript code embedded in HTML pages that redirects the browser to a malicious URL and implements a specific exploit.’

‘The Armorblox research team was able to observe this attack on multiple customer tenants across Office 365 and Google Workspace. The potential total attack exposure was close to 28K mailboxes.’

Targeting WhatsApp users and zeroing in on voice messages make sense given the staggering amount of users the service has.

What is phishing, and why is it called phishing?
A Royal Mail scam has been making the rounds.

Phishing is the term applied to kind of electronic communications scam that aims to obtain private information, or to spread harmful malware, via the recipient.

The phenomenon takes its name from fishing due to the parallels in unaware targets being reeled in by bait.

The term was coined around 1996, according to Computer World, as internet scammers began using e-mail lures, setting out hooks to fish for passwords and financial data from the sea of Internet users.

Hackers commonly replace the letter f with ph, a nod to the original form of hacking known as phone phreaking.

Every day on WhatsApp, over 7 billion voice notes are sent back and forth as voice messages provide a quick alternative to a phone call.

Voice messages are especially preferred by older family members who want to avoid typing or even communicating in another language.

Obviously, if you see this email (or one that looks like it) land in your inbox, don’t click the link.


Related Articles

Tesla reported record profits and record revenues for 2022
Germany confirms it will provide Ukraine with Leopard 2 tanks
Prince Andrew and Virginia Giuffre Photo Is Fake: Ghislaine Maxwell
Opinion | Israel’s Supreme Court Claims a Veto on Democracy
Moonwalker Buzz Aldrin Gets Married On His 93rd Birthday
Who’s Threatening Israeli Democracy?
Federal Reserve Probes Goldman’s Consumer Business
China's first population drop in six decades
Microsoft is finalising plans to become the latest technology giant to reduce its workforce during a global economic slowdown
Tesla slashes prices globally by as much as 20 percent
1.4 Million Copies Of Prince Harry's Memoir 'Spare' Sold On 1st Day In UK
After Failing To Pay Office Rent, Twitter May Sell User Names
Lisa Marie Presley, singer and daughter of Elvis, dies aged 54
FIFA president questioned by prosecutors
Britain's Sunak breaks silence and admits using private healthcare
Hype and backlash as Harry's memoir goes on sale. Unnamed royal source says prince 'kidnapped by cult of psychotherapy and Meghan'
Saudi Arabia set to overtake India as fastest-growing major economy this year 
Google and Facebook’s dominance in digital ads challenged by rapid ascent of Amazon and TikTok
FTX fraud investigators are digging deeper into Sam Bankman-Fried's inner circle – and reportedly have ex-engineer Nishad Singh in their sights
TikTok CEO Plans to Meet European Union Regulators
France has banned the online sale of paracetamol until February, citing ongoing supply issues
Japan reportedly to give families 1 million yen per child to move out of Tokyo
Will Canada ever become a real democracy?
Hong Kong property brokerages slash payrolls in choppy market
U.S. Moves to Seize Robinhood Shares, Silvergate Accounts Tied to FTX
Effect of EU sanctions on Moscow is ‘less than zero’ – Belgian MEP
Coinbase to Pay $100 Million in Settlement With New York Regulator
FTX assets worth $3.5bn held by Bahamas securities regulator
A Republican congressman-elect is under investigation in New York after he admitted he lied about his education and work experience.
Brazilian football legend Pele, arguably the greatest player ever, has died at the age of 82.
Hong Kong to scrap almost all its Covid rules
EU calls screening of travellers from China unjustified
US imposes Covid testing for visitors from China
Ukraine President Volodymyr Zelenskyy Addresses Joint Session of Congress - FULL SPEECH
Where is Rishi? Chancellor Jeremy Hunt's excuses about the UK's economic challenges just don't make sense
Former FTX CEO Bankman-Fried finally arrested in Bahamas after U.S. files charges
Corruption works: House Financial Services Chair Waters doesn't plan to subpoena her donor, Sam Bankman-Fried, to testify at hearing on FTX collapse
Ronaldo's new contract...
Prince William's godmother resigns honorary royal role after exposing her/their racism
Tax fraud verdict again exposes illusion of Trump the master businessman
Tax fraud verdict again exposes illusion of Trump the master businessman.
Yellen hints at ‘national security’ probe into Twitter purchase
Elon Musk reinstates Donald Trump's Twitter account.
Good news: US moves to shield Saudi crown prince in journalist killing
George W. Bush and Barack Obama will hold back-to-back disinformation conferences
Mission Improbable: Tom Cruise & Queen Elizabeth
Miss Argentina and Miss Puerto Rico are not single anymore
Boris Johnson is about to sign a contract with an American company to get millions for giving speeches. Something he did until very recently for free.
Solar + Powerwall ensures you never lose power, even if the grid goes down
Bavarian Prime Minister Söder: "There is no reason for mask obligations, no lockdowns anymore”