Connect with us

Hi, what are you looking for?

Cyber Security

Fake WhatsApp backup message delivers malware to Spanish speakers’ devices

Spanish authorities are warning of a phishing campaign that impersonates messaging service WhatsApp in an attempt to trick recipients into downloading a trojan.

Recipients are being urged to download copies of conversations and call histories from a location that offers only the NoPiques malware.

The NoPiques (“Do not chop”) trojan comes bundle in a .zip archive which, if opened and run on a vulnerable device, results in infection.

Believable phishing campaign

Dangerous emails typically come with the Spanish language subject line ‘Copia de seguridad de mensajes de WhatsApp *913071605 Nº (xxxxx)’, although this can vary.

Messages are written in grammatically correct Spanish, or at least with few errors – unlike many malware-peddling phishing messages in English and other languages.

The warning about the malware campaign comes from Oficina de Seguridad del Internauta (OSI) of the Spanish National Cybersecurity Institute (INCIBE).

The alert was promoted on social media by the Guardia Civil policing agency.

The Daily Swig asked OSI to estimate the possible number of victims caught out by the scam. No word back as yet, but we’ll update this story as and when more information comes to hand.

The latest attack follows a similar campaign that OSI warned about in March 2021.

The previous scam posed as messages from either WeTransfer, WhatsApp, Vodafone, the Spanish Ministry of Labor, or the Ministry of the Interior, but actually contained links that downloaded an (unnamed) trojan onto users’ devices.

OSI has published a YouTube video (see below) offering advice on how to spot scam phishing messages that pose as communiques from trusted organization, such as government agencies and internet services firms.

Source: https://portswigger.net/daily-swig/fake-whatsapp-backup-message-delivers-malware-to-spanish-speakers-devices

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

You May Also Like

Cyber Security

The Cyber Safety Review Board will assess how a hacking group reportedly linked to China leveraged a vulnerability in Microsoft Exchange Online to access...

Cyber Security

The Spanish National Police has apprehended a Ukrainian national wanted internationally for his involvement in a scareware operation spanning from 2006 to 2011. This...

Cyber Security

Security researchers observed a new campaign they attribute to the Charming Kitten APT group where hackers used new NokNok malware that targets macOS systems. The...

Cyber Security

The precautions and techniques that have been put in place for the protection of email messages from unauthorized access, interception or manipulation is regarded...

Copyright © 2023 Newsworthy News | Global | Political | Local | All News | Website By: Top Search SEO