Don’t Get Scammed With WhatsApp Images

The increased use of internet is intensifying online scams too.

Now, another scam was identified which is harder to identify as it would not ask you to click on a link, and then get access to your personal data on your phone. Neither does it ask for an OTP or your details to be entered in any given slot.

The scam would unfurl once you open an image on WhatsApp, which does not seem suspicious at all. Once the image is opened, the malware kickstarts working, silently getting access to your private data, other apps and to the entire gadget itself.

Cyber criminals have found a new way to target the netizens. The malware is carefully hid in a photo which on clicking would make you fall victim to the scam.

How does the scam work?

The scamsters send an unsuspicious image to your WhatsApp, usually from an unknown number. Though it might look like an ordinary picture, the malware designed to steal your banking details, passwords, OTPs, UPI information and even controlling your phone, is hidden in it which you cannot realise.

This technique of veiling harmful data inside images is called steganography. The most common type is called Least Significant Bit (LSB) steganography, which tucks the malware in tiniest part of the image file.

The moment you open the image, your phone can get hacked, and the most scary thing is you won’t even receive any warning about the gadget being hacked.

The scam came to light after a man in Jabalpur, Madhya Pradesh, lost nearly Rs 2 lakh in the same manner.

He received a photo from an unknown number on WhatsApp seeking help to identify someone in the image.

He did not open it immediately but on being requested through multiple calls from the same number, he finally clicked on it and his phone was hacked. His bank details were stolen and the money in his account was withdrawn.

How to stay safe from such scams:

Never open or download images, videos or click links from unknown numbers

Turn off auto-download for media in your WhatsApp settings.

Use caller ID apps like Truecaller.

Keep your phone’s software and antivirus ware updated.

On getting suspicious about any number, block it and report to the authorities.

Warn friends and family members, who are less tech-savvy

If you suspect you’ve been scammed, immediately alert and report to the cybercrime.gov.in.