Govt officials told to curb WhatsApp Web malware risk
Pakistan’s National CERT rates the threat high and urges officials to limit WhatsApp Web and Desktop on official Windows PCs while checking linked devices.
National CERT Pakistan issued a high-risk advisory for government officials, regulators, and those who handle sensitive information.
Attackers are using malware and phishing via WhatsApp Web, WhatsApp Desktop, and email on Windows systems.
Risks include remote access, stolen credentials, leaked documents, and hijacked WhatsApp Web sessions used to impersonate users.
CERT urges temporary limits on WhatsApp Web and Desktop on official PCs, checks of Linked Devices, patching, MFA, and WhatsApp two-step verification.
If a device may be compromised, disconnect it from the internet, report it, preserve logs, and reset credentials from a clean device.