The Cyber Security Authority issued a formal alert on October 18 2024 notifying the public about a significant increase in WhatsApp account takeover incidents according to a report by the Ghana News Agency. The agency stated that cybercriminals have developed a sophisticated method of impersonating support staff from WhatsApp or the Cyber Security Authority to gain trust from their targets.
According to the official statement from the Cyber Security Authority the scam begins when an attacker attempts to register a user’s phone number on a different device. This action triggers a legitimate verification code via SMS or a phone call which the fraudster then attempts to collect by claiming it is a security update or a verification requirement for a social media group.
A report from Graphic Online indicates that the compromised accounts are frequently used to contact the victim’s friends and family members to request emergency financial assistance. The Cyber Security Authority advised that legitimate staff from tech companies will never ask for a verification code and urged citizens to enable two step verification to secure their accounts.
Citi Newsroom reports that victims are encouraged to report any suspicious activities through the official Cybersecurity point of contact or the 242 short code. The authority further stated that individuals should avoid clicking on suspicious links sent through direct messages even if they appear to come from known contacts as those accounts may already be compromised.