High Alert Issued Over Possible Cyberattacks Through WhatsApp Web and Email
Mian Nadeem
Published October 26, 2026 | 03:39 PM
Attackers are attempting to access sensitive information through targeted phishing and malware attacks by impersonating government officials and departments, according to an advisory from the National Cyber Emergency Response Team.
Advisory Details
- Threat Level: High
- Target: Government officials and individuals with access to sensitive information
- Delivery Methods: WhatsApp Web, desktop applications, and email
The advisory highlights that attackers are impersonating government entities to gain access to confidential data through:
- Phishing: Targeted messages or files appearing to be from official sources.
- Malware: Malicious files disguised as official documents, capable of infecting Windows systems and stealing passwords or data.
Warning Signs:
- An unexpected message or file from a known number.
- The appearance of an unknown device in WhatsApp's Linked Devices section.
Recommended Actions
- Avoid using WhatsApp Web and desktop applications on Windows computers.
- Terminate suspicious WhatsApp Web sessions and independently verify any unverified links, files, or messages.
- Do not share passwords, one-time passwords (OTPs), or verification codes.
- Avoid transferring files received through WhatsApp to official Windows computers.
- Keep Windows operating system, browsers, and software up to date.
- Enable two-factor authentication and WhatsApp two-step verification.
- Immediately disconnect any device suspected of a cyberattack from the network and internet.
- Preserve relevant messages and system logs as evidence.
The advisory emphasizes the importance of precautionary measures for government institutions and individuals with access to sensitive information.