1 week ago
Hackers Exploit WhatsApp Web in Sophisticated CEO Fraud Attacks
Criminals are breaking into computers that have WhatsApp Web open.
They read old messages and learn how company leaders usually communicate.
Then they change saved contact details and pretend to be the company’s CEO.
Because the fake message appears in an old conversation, it can look real.
In one case, an accountant sent Rs 70 lakh before discovering the fraud.
Another company reportedly lost Rs 2.2 crore.
Police say workers should verify large payment requests by calling a trusted number.
Companies should also use extra login protection and require two people to approve large payments.
Fraudsters are hijacking active WhatsApp Web sessions to impersonate senior executives and request large money transfers.
Pune and Pimpri Chinchwad investigators identified at least six device-hacking cases in the last two months.
An accountant in Ravet transferred Rs 70 lakh after receiving a fraudulent CEO message inside an existing chat thread.
An automobile dealer company reportedly lost Rs 2.2 crore after its accounts executive’s device was compromised.
Police advise independent verification of payment requests, multi-factor authentication, session reviews and dual approval for large transfers.
- Who
- Cyber fraudsters targeted finance executives and employees handling company payments, according to investigators.
- What
- Fraudsters hijacked active WhatsApp Web sessions, altered contact details and impersonated CEOs to obtain large money transfers.
- Where
- The cases were investigated in Pune and Pimpri Chinchwad, including a company in Ravet.
- When
- Pune and Pimpri Chinchwad police have recorded more than two dozen whale-phishing cases since 2022, including at least six using device hacking in the last two months; the Ravet fraud occurred in April.
- Why
- The attackers sought to exploit trusted executive communications and persuade employees to transfer money to mule accounts.
Key facts
- Fraud method
- Hijacking an active WhatsApp Web session after a victim opens a malicious file or link.
- Impersonation technique
- Fraudsters block or rename the genuine CEO contact and replace it with a fraudulent number using the CEO’s name and photograph.
- Ravet loss
- An accountant transferred Rs 70 lakh to a specified bank account before becoming suspicious.
- Second requested transfer
- The same fraudster later requested another Rs 30 lakh, prompting the accountant to contact the CEO.
- Automobile dealer loss
- An automobile dealer company was reportedly defrauded of Rs 2.2 crore.
- Reported case volume
- Pune City and Pimpri Chinchwad police have registered more than two dozen whale-phishing cases since 2022.
- Recommended safeguard
- Verify large or changed payment instructions through a known phone number and use dual approval for high-value transactions.
Quotes
Rohidas Pawar, Deputy Commissioner of Police (Crime) for Pimpri Chinchwad
Deputy Commissioner of Police
“We have seen instances where fraudsters hack WhatsApp Web sessions and then alter the victim’s contact list. They save the genuine number of the CEO under a different name and block it and then replace it with a fraudulent number carrying the CEO’s name and display picture, as a result, messages from the fraudsters appear to come from a trusted contact already saved in the phone.”
indianexpress.com
“The technique exploits trust built over months or years of legitimate communication. By studying previous exchanges, fraudsters can replicate language, tone and working patterns of senior executives. The fraudulent requests are often marked as urgent or confidential and are accompanied by instructions not to discuss them with others.”
indianexpress.com
Sources
Related news
Pune Sugar Trader Loses Rs 3 Crore in Whale-Phishing Attack
Boss Scam: How Hackers Hijack WhatsApp CEO Accounts for Fraud
Mumbai Firm Loses ₹1.98 Crore in WhatsApp Director Impersonation Scam
Pune Firm Loses Rs 30 Lakh in Teams Boss Scam
Fraudsters posing as senior official dupe accountant into Rs1.5cr transfer
Fake Parcel Call Allegedly Hijacks BMC Chief’s WhatsApp
Tamil Nadu Cybercrime Probe Targets Deepfake Impersonating CM Vijay
Adilabad Police Arrest Suspect in Rs 5.3 Crore Instagram Fraud
Man loses ₹3.81 lakh in alleged Kerala lottery scam
Indore Tile Trader Loses ₹2.5 Lakh in WhatsApp Scam
