Bulawayo – Hatred Zenenga, editor of the Sunday News, recently became the latest victim of a sophisticated WhatsApp hacking scam, highlighting the growing threat of online fraud in Zimbabwe. This incident is a stark reminder of the importance of cybersecurity awareness and the need for vigilance among all social media users.

Zenenga’s WhatsApp account was compromised, giving a malicious actor access to his contact list and allowing him to send fraudulent messages to his colleagues and other contacts. These messages, designed to appear authentic and urgent, solicited financial assistance under false pretenses.

The scammer’s message, sent from Zenenga’s apparently legitimate account, read: “I’m trying to send money to someone to get treatment, it’s not going through. I’m having problems with my account; can you help me send it directly to the person’s account? I will refund it immediately (once) my transfer is active.

The message used several common tactics used in online scams. Creating a sense of urgency, coupled with a call for help paying for medical treatment, was intended to elicit an immediate response from unsuspecting beneficiaries. The absence of precise details on the treatment or the identity of the beneficiary further fueled suspicion. Finally, the promise of immediate reimbursement was designed to build trust and encourage financial assistance.

When a colleague, recognizing the unusual nature of the request, asked for bank details, the hacker provided the name “Shawn Mataruka” and an Econet mobile number registered with Ecocash: 0788289329. This seemingly innocuous detail was again added to the deception, making the scam appear more credible.

However, several red flags should have alerted recipients to the fraudulent nature of the message. The lack of precise details about the medical treatment, the beneficiary and the amount requested should have raised immediate concerns. Additionally, the ease with which the hacker provided banking information without any verification procedures should have served as a red flag. The immediate promise of a refund, a common tactic in many scams, should also have raised suspicion.

The incident involving Mr Zenenga is not an isolated case. WhatsApp hacking is becoming increasingly widespread, with fraudsters employing increasingly sophisticated methods to gain access to accounts and exploit user trust. This highlights the need for greater digital literacy and the adoption of stricter security measures to protect against such attacks. Let’s take a look at common hacking methods and preventative measures:

How WhatsApp accounts are hacked:

• Phishing: Hackers often resort to phishing, sending deceptive messages or emails that appear to come from WhatsApp or a trusted source. These messages usually contain malicious links that, when clicked, install malware or redirect users to fake login pages designed to steal their credentials.
• Malware: Malware installed on a user’s phone can covertly monitor activity, including WhatsApp messages and login information. This malware can be downloaded via infected apps, websites or email attachments.
• Exploitation of vulnerabilities: Hackers can exploit security vulnerabilities in older versions of the WhatsApp app. Keeping your application up to date is crucial to protect against known vulnerabilities.
• SIM card exchange: In this method, hackers trick mobile operators into transferring a user’s SIM card to a new device they control, thereby gaining access to the phone number linked to the WhatsApp account.
• Social engineering: This involves manipulating users into revealing sensitive information, such as their WhatsApp login details or verification codes, through deceptive tactics.

How to prevent WhatsApp account hacking:

• Enable two-step verification: This adds an extra layer of security, requiring a PIN or password in addition to your phone number to access the account. This is undoubtedly the most important step.
• Keep your app up to date: Update your WhatsApp app regularly to get the latest security patches and bug fixes.
• Beware of suspicious links and attachments: Never click on links or open attachments from unknown or untrustworthy sources.
• Use strong passwords: Create a strong, unique password that is difficult to guess. Avoid using easy-to-guess information like birthdays or pet names.
• Beware of phishing attempts: Be wary of emails or messages asking for personal information, including login details or verification codes. WhatsApp will never directly ask for this information.
• Protect your phone: Use a strong password or biometric security (fingerprint or facial recognition) to protect your phone from unauthorized access.
• Check your privacy settings regularly: Check your WhatsApp privacy settings regularly to control who can see your profile information, status updates, and last login time.
• Report suspicious activity: If you think your account has been compromised, report it to WhatsApp immediately and change your password.

Latest news from Zimbabwe