The National Computer Emergency Response Team (nCERT) has issued a safety advisory to WhatsApp users in Pakistan due to an increase in cyber threats to the popular messaging service.
With the growing use of WhatsApp for personal and professional purposes, it has become easy prey for cyberattacks, it has become an easy target for cybercriminals, who use phishing and social engineering tactics to find victims and access their accounts.
Secure your passwords
nCERT urges everyone to use strong passwords to decrease the risk of unauthorized access. A set of rules for selecting a personal password includes the rejection of easily guessable numerical sequences (such as “123456”) and birth dates. Numerous alphabets, numerals, and signs will improve password security.
Enable two-factor authentication
The advisory highly suggests implementing Two-Factor Authentication (2FA) on WhatsApp. This feature provides additional protection and is accessible through the app’s options. If an attacker obtains your SIM card, he or she will be locked out of your WhatsApp account if they attempt to re-register using the additional PIN code.
Check security codes with contacts
nCERT also recommends that you compare your WhatsApp security codes with your contacts on a regular basis. Such codes allow you to encrypt conversations so that they cannot be intercepted by unauthorized parties.
Lock your app with VPNs
Use your fingerprint to lock WhatsApp and do not use free Wi-Fi. Also, monitoring your account for connections from unauthorized devices can help to identify potential breaches.
Modify privacy settings
To reduce exposure, nCERT recommends that one update his or her privacy settings so that only friends can view your details. Users should also disable the cloud backup option, as it provides hackers with a point of entry over open networks.
nCERT urges users to update WhatsApp’s newest security updates and report any malicious behavior to the platform directly. Users are regularly updated to the current version, which includes security enhancements and bug fixes.
Thus, by following these broad instructions, any ordinary user and government officer can avoid unauthorized access to their accounts and, as a result, safeguard the confidentiality of their messages.
