The Presidency's Cyber Security Directorate announced that there has recently been an increase in complaints about account information in WhatsApp and similar messaging applications being captured and used in fraudulent activities. Regarding the initiatives in question, it was observed that the Cyber Security Directorate requested money transfers from their close circle via IBAN information, using the identities of the account holders.
IPHONE IS ESPECIALLY TARGET: WHAT TO DO?
In the technical investigations carried out by the Presidency, it was determined that malware that specifically targets security vulnerabilities in iPhone devices with outdated iOS operating systems can be used in such attacks.
The malware in question; It can infect devices through malicious advertisements on the internet, suspicious links and compromised websites. In some advanced attacks, simply viewing malicious content can compromise device security.
Attackers who gain unauthorized access to devices using these methods can access personal information and messaging accounts and perform operations without users' knowledge. Using the identity of the account holders, money transfers can be requested from people on the contact lists due to urgent need.
In order for citizens to protect their digital security by the Cyber Security Presidency; operating system and application updates, all our citizens, especially iPhone users, should keep the operating systems and messaging applications of their devices up to date, install the latest security updates offered in the Settings > General > Software Update section on their iPhone devices, stay away from suspicious links and advertisements: Do not click on links of unknown origin or reliability, including social media ads, do not download applications or files from unreliable websites, do not take any action if suspicious links are opened, strengthen account security: Two-step verification in WhatsApp and other digital accounts. activation, not sharing verification codes with third parties, regularly checking the Connected Devices section in the WhatsApp application and terminating unrecognized sessions; Considering that unauthorized access may not be displayed in this section in some advanced attacks, verification of financial requests: It has been reported that verifying IBAN information and money transfer requests, including messages from familiar people, through a different communication channel, preferably by calling the relevant person by phone, is important in reducing cyber security risks.
It is important for citizens who suspect that their accounts have been compromised to inform their close circle through different communication channels, preserve digital evidence, including suspicious messages and IBAN information, and apply to law enforcement units or Chief Public Prosecutor's Office.
If a money transfer has been made, contacting the relevant bank without delay; In order to restore device security, it is recommended to reset the phone and install the current operating system version, change all account passwords, especially banking, social media and e-mail accounts, on a secure device and enable multi-factor authentication on all possible accounts.
It is of great importance for citizens to consider that messages coming from real messaging accounts belonging to people they know may have been sent without the knowledge of the account owner.
The Cyber Security Directorate continues its monitoring, analysis and information activities against cyber threats in order to ensure the security of citizens in digital environments.
