The following statements were used in the written statement made by the Presidential Cyber Security Directorate:
"Recently, there has been an increase in complaints that our citizens' accounts on WhatsApp and similar messaging applications have been taken over without their knowledge and used in fraudulent activities. In these attempts, it is seen that account holders' identities are used and money transfers are requested from their close circle via IBAN information. In the technical investigations carried out by our Cyber Security Presidency, it has been determined that malicious software targeting security vulnerabilities in iPhone devices with outdated iOS operating system can be used in such attacks. These malicious software can be used in such attacks through malicious advertisements on the internet, suspicious links and compromised websites. "In some advanced attacks, even viewing malicious content can put device security at risk. With these methods, attackers who gain unauthorized access to devices can perform transactions without the users' knowledge by accessing personal information and messaging accounts, and can request money transfers from people on their contact lists for urgent needs, using the identity of the account holders."
'STAY AWAY FROM SUSPICIOUS LINKS AND ADVERTISEMENTS'
Also explaining the measures to be taken, the Presidency said: "Operating system and application updates: All our citizens, especially iPhone users, should keep the operating systems and messaging applications of their devices up to date, install the latest security updates offered in the Settings > General > Software Update section on their iPhone devices, Stay away from suspicious links and advertisements: Do not click on links of unknown origin or reliability, including social media ads, do not download applications or files from unreliable websites, do not take any action if suspicious links are opened, Account Strengthening security: Enabling two-step verification in WhatsApp and other digital accounts, not sharing verification codes with third parties, regularly checking the Connected Devices section in the WhatsApp application and terminating unrecognized sessions; considering that unauthorized access may not be displayed in this section in some advanced attacks, Verification of financial requests: Verifying IBAN information and money transfer requests, including messages from familiar people, through a different communication channel, preferably by calling the relevant person by phone, is important to reduce cyber security risks. His statements were recorded.
In the statement, it was stated that our citizens who suspect that their accounts have been compromised should inform their close circle through different communication channels, preserve digital evidence, including suspicious messages and IBAN information, and apply to law enforcement units or Chief Public Prosecutor's Office.
If a money transfer has been made, it is recommended to contact the relevant bank without delay and to reset the phone and install the current operating system version in order to restore device security.
It was recommended to change all account passwords, especially banking, social media and email accounts, via a secure device and to enable multi-factor authentication on all possible accounts.
In the statement, "It is of great importance for our citizens to consider that messages coming from real messaging accounts belonging to people they know may have been sent without the knowledge of the account owner." The expression was used.
