Archive · 20 Aug 2026
Hackers Exploit WhatsApp Web in Sophisticated CEO Fraud Attacks
Criminals are breaking into computers that have WhatsApp Web open.
They read old messages and learn how company leaders usually communicate.
Then they change saved contact details and pretend to be the company’s CEO.
Because the fake message appears in an old conversation, it can look real.
In one case, an accountant sent Rs 70 lakh before discovering the fraud.
Another company reportedly lost Rs 2.2 crore.
Police say workers should verify large payment requests by calling a trusted number.
Companies should also use extra login protection and require two people to approve large payments.
Fraudsters are hijacking active WhatsApp Web sessions to impersonate senior executives and request large money transfers.
Pune and Pimpri Chinchwad investigators identified at least six device-hacking cases in the last two months.
An accountant in Ravet transferred Rs 70 lakh after receiving a fraudulent CEO message inside an existing chat thread.
An automobile dealer company reportedly lost Rs 2.2 crore after its accounts executive’s device was compromised.
Police advise independent verification of payment requests, multi-factor authentication, session reviews and dual approval for large transfers.
- Who
- Cyber fraudsters targeted finance executives and employees handling company payments, according to investigators.
- What
- Fraudsters hijacked active WhatsApp Web sessions, altered contact details and impersonated CEOs to obtain large money transfers.
- When
- Pune and Pimpri Chinchwad police have recorded more than two dozen whale-phishing cases since 2022, including at least six using device hacking in the last two months; the Ravet fraud occurred in April.
- Where
- The cases were investigated in Pune and Pimpri Chinchwad, including a company in Ravet.
- Why
- The attackers sought to exploit trusted executive communications and persuade employees to transfer money to mule accounts.
- Fraud method
- Hijacking an active WhatsApp Web session after a victim opens a malicious file or link.
- Impersonation technique
- Fraudsters block or rename the genuine CEO contact and replace it with a fraudulent number using the CEO’s name and photograph.
- Ravet loss
- An accountant transferred Rs 70 lakh to a specified bank account before becoming suspicious.
- Second requested transfer
- The same fraudster later requested another Rs 30 lakh, prompting the accountant to contact the CEO.
- Automobile dealer loss
- An automobile dealer company was reportedly defrauded of Rs 2.2 crore.
- Reported case volume
- Pune City and Pimpri Chinchwad police have registered more than two dozen whale-phishing cases since 2022.
- Recommended safeguard
- Verify large or changed payment instructions through a known phone number and use dual approval for high-value transactions.