New WhatsApp fraud targets corporate officials in Hyderabad
Hyderabad police have warned of a new cyber fraud targeting corporate officials, where hackers gain access through phishing emails and misuse WhatsApp accounts to send fake financial instructions, leading to major financial losses for companies.
Hyderabad: Cybercriminals have now devised a sophisticated new fraud method targeting top corporate officials, including CEOs, CFOs, business heads and accountants in the city.
According to the police, the fraud begins with phishing emails sent to official company email IDs. These emails contain malicious links that, when clicked, install malware on the victim’s system, allowing hackers to gain full remote access.
Hyderabad Police Commissioner VC Sajjanar said, “Once inside, the attackers exploit active WhatsApp Web sessions on the compromised systems. Using the genuine WhatsApp accounts of senior executives, they send urgent financial instructions to company accountants, posing as CEOs or CFOs.”
The fraudsters typically claim they are in critical meetings and unable to take calls, pressuring staff to immediately transfer huge amounts of money, often running into crores, into fraudulent bank accounts. “Since the messages originate from legitimate WhatsApp accounts, employees often assume them to be authentic and comply without verification,” the commissioner said.
Cybercrime officials said that several such incidents have recently surfaced across Hyderabad, raising serious concerns among corporate entities.
Advisory to Companies:
- Adopt strict verification protocols for financial transactions.
- Employees should never act on payment requests received via WhatsApp without confirming directly with the official concerned through a phone call.
- Install robust firewalls and updated antivirus software.
- Avoid clicking on suspicious email links.
- Log out of WhatsApp Web after each session.
- Conduct regular cybersecurity awareness training for staff.
In case of cyber fraud, immediately contact the national cybercrime helpline 1930 or file a complaint on the official portal: www.cybercrime.gov.in.
