Recently, there has been an increase in reports of WhatsApp and other messaging application accounts being compromised without their owners' knowledge and subsequently used for fraudulent activities.
In an announcement issued by the Presidency of the Republic of Türkiye, Cybersecurity Directorate, it was highlighted that malicious software targeting security vulnerabilities in iPhone devices running outdated versions of iOS may be used in such attacks.
Such malware can reach devices through malicious advertisements, suspicious links, and compromised websites. In some sophisticated attacks, simply viewing malicious content may be sufficient to put device security at risk.
Attackers may impersonate account owners through compromised messaging accounts and send messages to people in their contact lists, requesting money transfers under various pretexts, such as an urgent financial need. Since these messages originate from the accounts of people known and trusted by the recipients, such fraudulent attempts can be difficult to identify.
To protect your digital security, we strongly recommend taking the following precautions:
- Keep your devices up to date: iPhone users should install the latest available version of iOS by navigating to Settings > General > Software Update.
- Avoid suspicious links: Do not click on links from unknown sources or access untrusted websites and advertisements.
- Update your messaging applications: Make sure that you are using the latest versions of WhatsApp and other messaging applications.
- Enable two-step verification: Activate WhatsApp's two-step verification feature to enhance the security of your account.
- Review linked devices: Regularly check the Linked Devices section in WhatsApp and remove any devices you do not recognize.
- Verify requests for money: Even if a payment request comes from someone you know, confirm it by contacting that person through a different communication channel before making any transfer.
What to do if you suspect that your account has been compromised:
Inform your contacts about the situation, change your account passwords using a secure device, and contact your bank if necessary. Preserve any relevant digital evidence and report the incident to the competent authorities. To ensure your device is secure, consider reinstalling the operating system or performing a factory reset where appropriate.
Remember: A message received from the genuine messaging account of someone you know does not necessarily mean that the message was sent by that person.
All METU members are strongly encouraged to follow these recommendations to protect their personal devices and digital accounts.
Protecting your digital identity is a shared responsibility.