whatsapp Archives - Recon Bee

TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms

11May

By RBNo Comments

News

TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms

A previously unknown Brazilian banking trojan known as TCLBANKER has been discovered by threat hunters. It can target 59 banking, fintech, and cryptocurrency systems. Elastic Security Labs is monitoring the activities under the code REF3076. The malware family is thought to be a significant upgrade of the Maverick family, which is known to use a worm known as SORVEPOTEL to propagate to a victim's contacts over WhatsApp Web. Trend Micro attributes the Maverick campaign to a malware cluster known as Water Saci. A loader with strong anti-analysis capabilities in the center of the attack chain launches two embedded modules: a fully functional banking trojan and a worm component that spreads via Microsoft Outlook and WhatsApp. According to security experts Jia Yu Chan, Daniel Stepanic...

WhatsApp introduces parent-managed accounts for pre-teens

12Mar

By RBNo Comments

News

WhatsApp introduces parent-managed accounts for pre-teens

WhatsApp has started introducing parent-managed accounts for preteens, which let parents and guardians choose who may get in touch with them and what groups they can join. These accounts do not have access to Meta AI, Channels, Status, or location sharing; instead, they are limited to chatting and phoning. Third parties, including parents, are unable to view the child's messages since they are end-to-end encrypted and cannot listen in on their calls or read their chats. Both the parent's and the child's devices must be present at the same time in order to set up a parent-managed account. In order to connect the two accounts, the parent must register, validate the child's age, and scan a QR code on the child's smartphone. To make sure that only they can access and modify message r...

WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware

28Jan

By RBNo Comments

News

WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware

On Tuesday, Meta announced that Strict Account Settings would be added to WhatsApp to protect certain users against sophisticated cyberattacks based on their identity and activities. By sacrificing some functionality for increased protection, the feature, which is comparable to Lockdown Mode in Apple iOS and Advanced Protection in Android, attempts to shield people, like journalists or public figures, from sophisticated spyware. Once this security mode is activated, attachments and material from users who are not in their contacts will be blocked, and several account settings will be restricted to the most restrictive settings. With just a few taps, this lockdown-style feature strengthens your WhatsApp security even further by locking your account to the most restrictive settings...

WhatsApp device linking abused in account hijacking attacks

18Dec

By RBNo Comments

News

WhatsApp device linking abused in account hijacking attacks

In a campaign known as GhostPairing, threat actors are misusing the lawful device-linking capability to take control of WhatsApp accounts through pairing codes. Since the victim is duped into connecting the attacker's browser to a WhatsApp device, authentication is not necessary for this kind of attack. Threat actors may exploit this information to conduct fraud or impersonate users by gaining access to the entire chat history and associated material. The campaign was initially discovered in Czechia, according to Gen Digital (previously Symantec Corporation and NortonLifeLock), but the propagation technique enables it to extend to other areas, using compromised accounts as launching pads to reach new targets. An internet photo of the victim is purportedly linked in a brief messag...

Meta launches new anti-scam tools for WhatsApp and Messenger

23Oct

By RBNo Comments

News

Meta launches new anti-scam tools for WhatsApp and Messenger

Meta has revealed additional resources to help users of Messenger and WhatsApp safeguard their accounts and guard against any fraud. The business has begun testing more sophisticated scam-detection for suspicious chats on Messenger, which will alert users when a new contact sends a potentially fraudulent message. Users can also choose to submit recent communications for AI scam assessment, which will look for indications of a scam. Users will be notified when a possible fraud is detected and given a list of recommended actions, such banning or reporting the sender. According to Meta, if a possible fraud is identified, you will receive further information about typical scams and we will recommend measures like disabling or reporting the questionable account. By turning off the ...

WhatsApp unveils ‘Private Processing’ for cloud-based AI features

1May

By RBNo Comments

News

WhatsApp unveils ‘Private Processing’ for cloud-based AI features

WhatsApp has revealed 'Private Processing,' a new technology that lets users take advantage of sophisticated AI capabilities by shifting work to cloud servers that protect privacy. Utilizing AI features that are too demanding for on-device technology, like WhatsApp's message summary and suggestion authoring, requires this. Because the new function will be fully opt-in and not activated by default, users will have total discretion over when and how they use it. WhatsApp users will not have instant access to private processing, but it will be made available over the following weeks. To verify the legitimacy of users who choose to use Private Processing, the system authenticates them anonymously through their WhatsApp app read more about WhatsApp unveils 'Private Processing' for ...

WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads

24Apr

By RBNo Comments

News

WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads

Advanced Chat Privacy, a new privacy feature added by WhatsApp, enables users to prevent participants in regular chats and groups from disclosing the contents of a conversation. WhatsApp said in a statement that this new feature, which is accessible in both chats and groups, helps stop someone from stealing content from outside of WhatsApp for situations where you might want more privacy. When used, the optional feature stops others from using messages for artificial intelligence (AI) functions, exporting chats, or automatically downloading material to their phones. It's important to remember that users can still manually download the files or capture individual screenshots. According to the well-known messaging app, the feature is "best used" while having delicate discussions wi...

Chinese Android Phones Shipped with Fake WhatsApp, Telegram Apps Targeting Crypto Users

16Apr

By RBNo Comments

News

Chinese Android Phones Shipped with Fake WhatsApp, Telegram Apps Targeting Crypto Users

Since June 2024, trojanized apps that pose as Telegram and WhatsApp and feature cryptocurrency clipper capability have been seen pre-installed on low-cost Android handsets made by Chinese enterprises. Although the practice of stealing financial information through malware-laced apps is not new, recent research from Russian antivirus provider Doctor Web indicates a sharp increase in the number of threat actors preloading new devices with malicious apps by directly targeting the supply chains of different Chinese manufacturers. According to the firm, fraudulent programs were found directly in the phone's pre-installed software. In this instance, the WhatsApp messenger was modified to include the malicious code. Most of the affected handsets are reportedly low-end phones that imitat...

Russian-Linked Hackers Using ‘Device Code Phishing’ to Hijack Accounts

14Feb

By RBNo Comments

News

Russian-Linked Hackers Using ‘Device Code Phishing’ to Hijack Accounts

Microsoft is drawing attention to Storm-2372, a growing threat cluster that has been linked to a fresh wave of cyberattacks targeting several industries since August 2024. In Europe, North America, Africa, and the Middle East, the attacks have targeted the government, non-governmental organizations (NGOs), information technology (IT) services and technology, defense, telecommunications, health, higher education, and the energy/oil and gas sectors. The threat actor has been seen using messaging apps like Microsoft Teams, WhatsApp, and Signal to target users by pretending to be a well-known individual who is relevant to the target in an effort to gain trust. The threat actor is evaluated with medium confidence to be in line with Russian interests read more about Russian-Linked Hackers...

WhatsApp now encrypts contact databases for privacy-preserving synching

24Oct

By RBNo Comments

News

WhatsApp now encrypts contact databases for privacy-preserving synching

Identity Proof Linked Storage (IPLS), a new encrypted storage system for contact management that protects privacy, has been released by the WhatsApp messaging app. The new solution fixes two issues that WhatsApp users have faced for years: the inability to sync contacts between devices and the possibility of losing contact lists if they misplace their phone. WhatsApp contact lists will now be linked to the account instead of the device thanks to IPLS, making it simple for users to manage them in between device replacements or modifications. Keeping separate contact lists for several accounts on the same device, each securely controlled and separate from the others, is another feature made possible by IPLS read more about WhatsApp now encrypts contact databases for privacy-preserv...