Bitcoin Forum

On-line fraudulent and hacking schemes is getting so alarming these days as future scamming schemes becomes unimaginable to us.
The awareness of how sophisticated Links and OTPs has been threatful to our devices as the most tricky way of scammers getting access to our devices to steal our private data's and funds has gone outdated and now comes to where downloading just an image through WhatsApp now becomes the new formate.
WhatsApp has now become a targeted platform because it is known most common means people feel comfortable to communicate and shares informations due it usability and end-to-end encrypted system.

As report to this new trend says, "a resident in Jabalpur who was sent an image by an unknown source (number) has already been victimized with this concept loosing about ₹2 lakh after downloading the malicious image and then it installed the malware tool in the victims device to do the "data exfiltration job" while victim have no ideal if such software is existed in his device".

Meanwhile... Cybersecurity engineers has warned Whatsapp users to exercise "safe online behavior" by not taking just an image too common as you may have think it won't be harmful since it is not accompanied with links or other conventional strategies that we only finds suspicion to override our device and wallets Privacies.

https://m.economictimes.com/news/new-updates/not-otp-or-links-but-hackers-now-use-whatsapp-images-for-fraud-check-details-here/articleshow/121393609.cms?_oref=cook

I haven't really seen anything of this nature because I know WhatsApp to download image automatically as long as one has data connection, how then can one avoid it being downloaded? it's very scary at this point because I use WhatsApp and the images are just downloaded without ones permission. However this monitoring private key stealers have a way of it's operations and some threads before have educated us on how to avoid them.

Furthermore, the internet is not a safe place but one should observe every security measure that is good enough to help us stay safe.

Heh. What about the developers' statement that WhatsApp is a very secure and confidential manager? I remember these screaming conclusions when there was a comparison of Telegram and WhatsApp security. However, there is no difference; in our time, everything depends on the device's owner. If he is stupid, does not read the news, is not interested in security rules, and is very trusting, he will fall into the trap of scammers, just out of nowhere.

Ouch, this is really worrying and scary. i had heard in the past about trojans that could be installed on your mobile device just by tapping on the preview of an image within a whatsapp conversation to view it in full, which were mostly used by the judicial authorities to put the phones of some suspects under surveillance.
reading these articles makes me want to go back to the old and beloved dumbphone (whose battery lasted a week, by the way).



This is indeed a good question : anyone has a clue?

You can manage your WhatsApp file downloads by disabling the automatic download. Then files can only be downloaded by your permission where it Will be manually downloaded by your instructions.

Getting this done, get to your WhatsApp "setting"  and follow the process because I can not give you a step by step guide since I don't know the model of your device.
Perhaps don't feel lazy or negligence to do this to avoid awful stories.

[Solution]

Since OP only brought the recent scam and monitoring malware awareness without a possible solution to it, hence I have took my time look into WhatsApp and find some possible solution.

[1] Since most of this scammers get contacts from groups and other places where one exposed their contact Without ones awareness it's best to head over to your WhatsApp settings > Privacy > Advanced > Then enable Block unknown account messages.
https://www.talkimg.com/images/2025/05/26/UaehVI.jpeg

[2] Since images download has an option of enabling and disabling, hence head over to WhatsApp settings > Storage and data > media auto-download > There are options of [When using mobile data, When connected on WiFi, When roaming.] > Click on each of them and un-check the image options and any other thing you do not want to download automatically on each of the options.
https://www.talkimg.com/images/2025/05/26/Uae7kz.jpeg

---

I believe this will be helpful to everyone, however I do not know if creating a separate thread on this guided with extensions on explaining the solution or just leaving it here?

---

Edit: Op has given his solution above.

You can check whether Whatsapp has customize setting to disable automatic download. I don't use Whatsapp so I don't know but in Telegram, you can disable this feature if you are very careful with your devices.

In Telegram, for example
https://techviral.net/disable-auto-media-download-telegram/

It seems you can do the same with Whatsapp but you must check it.
https://www.guidingtech.com/stop-auto-download-in-whatsapp/

Every developers will always hype their sites or softwares especially when the community users are concerned of their privacies which category would also be a priority to the developer to also consider.
This could be a privacy-first marketing approach. So, we don't need to entirely trust statements driven to the conclusion that the platform is impossible to be compromised.

Brian Acton and Jan Koum developed Whatsapp with the very high secured software program "end-to-end encryption" that is basically to protect user Privacies from the platform. Meanwhile... This scamming scheme is not targeted just to get your WhatsApp data's but getting access to your device where your device informations including your documents and private keys is being extracted with the scheme of the malware image installing itself in the device.

So literally Whatsapp is only used on this regard to install the malware software in your device.
And of course this sophisticated scheme can be possible to target some other platforms but I think Whatsapp is a target here because Whatsapp is likely a dominance in the communication market.

And for this threats sake, the current Whatsapp will enroll on updating to advanced features where such trick be spotted.
So in sequence to this advanced request, developers is already submissive that the platform is not guaranteed to be uncompromised. So to curve this, it will be needful for users to update their whatapp when the developers launches the new version.

That is to say... Developing this new version is a key reason of identifying such phishing threats so that users can always stay aware but while scammers are also studying too hard to breach securities projecting the current version of whatapp or any platform, developers could be taken unaware not untill the scammers has gained access or phishing sensitivity is being observed then could be when developers may tend to provide an advanced version just as what is ongoing with this scheme of malware whatapp images as an avenue to intrude into our Privacies.

It's one of few cases where people with common security awareness would become a victim. WhatsApp should've prevented script/program inside image from being executed. While the news doesn't mention it, i wonder whether this vulnerability still works if you disable certain permission on WhatsApp.


That's good idea. But it's not practical if you live on place where WhatsApp is very popular where legitimate people (such as recruiter or delivery courier) is likely to contact you using WhatsApp.

Regardless to personalizing our Whatsapp incoming messages with others incline (blocking unknown users messages), be guided that the WhatsApp group you may belong is also not secured because there in the WhatsApp group, you will experience unwanted recommendations such as invitation prioritizing marketing where links and images are being flooded if the WhatsApp group members are not coordinated on the basic obligations of the group.

And therein, not every informations could be trusted so, it is also wise to be careful on that note while deactivating your media auto downloads would always help you on a concept as detailed of this thread.

Also, don't click or downloads images that the sender did not give a description of the image in the first place. That is when you have a limited trust level with the user without undermining your familiarities.

So as for now, "Don't step on informations that has no earlier explanation" while your watchword remains "concious" with your device and your online engagements.

You are right mate, this already what I wanted to say immediately I was reading the thread. You have already said the actual solution to solving this issues of unknown person sending you messages or links on WhatsApp.
I think, if one is Smart enough, they can easily set their WhatsApp to block unknown number from sending them messages and also proceeding their IP during calls.

As long as a platform remain centralized and all servers are been controlled by one entity? There is likely a point of failure in the future. How many times has Coinbase hacked and data breach happened, they are right now been sued because of the recent breach of data that happen some days ago. (https://www.theblock.co/amp/post/355687/coinbase-sued-class-action-data-breach) This social platform don't get attack that much like other ones because they are not financial institutions that handle money related else I'm very confident that we are going to be having series of episodes from these companies and things that are happening behind the scenes.

The only thing I can grasp here is as a WhatsApp user, don't share any sensitive information on WhatsApp even when they claimed there data is encrypted and "bla bla", if government can approach them for information and they give out, there is nothing sensitive safe with that platform. I can only imagine these feature of "me" in contact where I do forward some forward message, if people use that to save seed phrases or private keys, then they are doomed. There is 99% chance that many people are using the feature to save sensitive information.

I used whatsapp before when I was on Malaysia since its their go to app for socials but I didnt like it compared to messenger of facebook. It seems theres so much suspicious on their apps. Probably due to their unfiltered system. I believe this app is a Chinese Product if Im not mistaken.

Actuallt I prefer discord or telegram over this app.

I think it's not new; I have received such messages from the beginning of using WhatsApp. Usually at that time they invited some Ponzi and scam schemes. They became kind of angry when I refused to join them. They provide links, etc., but I haven't bothered to click; I just ignored them and blocked them if they don't stop messaging me. So they can't attack me, and I was safe since I wasn't greedy that time. Even if they offer a high return, I just ignore it.

These days it seems that this type of image attack is happening. I have seen more such threads where scammers have been trying to scam innocent people. They usually collect mobile numbers from data breaches. So try to avoid any greedy offers and don't open any link provided by an unknown person. Otherwise, you might fall into their trap.

Adjust your media download settings from your WhatsApp to only download images when permitted.

WhatsApp does more security than telegram, i don't know much about Discord but i make use of WhatsApp and the options of securing yourselves from unsupported conversations is free unlike telegram that demands you to use their premium feature. If i don't give out my number, no once can add me up, message me even through groups, i set my restrictions too well.

It is? Im not sure though but there are some red flags when I use whatsapp. Yeah telegram isnt safe either but I think its more used by many, I am using it due to crypto related stuff and communication to some airdrop projects. What I dont like about it its swarming with scammers dming you.

Yes, WhatsApp seems to be more secured since communication there is more to private connections. What exactly are your red flags in WhatsApp?

Telegram is a den for scammers, practical example is when i had issues with funds deposited to my exchange which i contacted the support team through telegram, in less than a minute i received too many support reach, all are fake profiles pretending to be admins, we can find more scammers in telegram than in any social app. If not for joining groups many people won't be making using of telegrams for communication purpose.

The problem is that I like the automatic download feature :-[ it is sad to think that because of malicious people I have to be careful with the choices I make, even if they are the ones offered by the official provider (in this case WhatsApp, but where else?). And even in that case, there is no way we can be 100% safe.

I heard a few weeks ago that it was recently discovered a vulnerability that led to getting infected by simply receiving an SMS, even without opening it. Just by having your smartphone turned on. It seems that these attacks were reserved for very important targets, but still.

Thank you for sharing, I didn't know this can also be possible via WhatsApp, I only thought it's through email that an image containing virus can be sent because I have read about that some time ago. Scammers are doing everything possible to steal from people and the only way to stay ahead of them is by having this informations on time before we become victims already. That was how some random number set me a message on WhatsApp some weeks, telling me that they have a platform that can enable me work from home and earn very well by just working 2 hours in a day, I engage in the conversation but at the end, they were scammers because they wanted me to pay a registration fee which I declined.

The app is technically a Chinese product because it can gather and share user data with Meta (formerly Facebook) for analytics and advertising purposes, making it not a fully end-to-end encrypted platform. Their end-to-end encrypted service is not guaranteed to work even if they are able to share such information.

Downloading image with WhatsApp could be dangerous although
I have hear that news but I think it's only for the old version of the WhatsApp currently no such issue.
Except if we are opening the Exe and Apk file or some bat file
I think we should always look for the extension before downloading anything

But yes surely scary to think that even something as Simple as that's opening a photo can put your privacy and funds at risk generally it's trick I will say to open the exe and apk file

I think we should not download any .apk or .exe even if it looks harmless we should always download from offical sources
But yes to take precaution I definitely check my WhatsApp setting & stop automatic download Better safe than sorry 😀

WhatsApp and Telegram are used by billions of people and are very popular, so WhatsApp scammers have chosen these platforms. WhatsApp and Telegram will tell people that they can get job offers or earn money through fake links, which many users do not understand that they are talking to scammers, clicking on their fake links can steal your personal information or your money, they will harm you in various ways, they will tell you in WhatsApp messages that you have won the lottery or your WhatsApp will be closed and they will offer you free gifts through which they cheat you. But if we talk about reality, no matter how good the technology is, it depends on the users that how much they are able to protect their privacy, or do they want to be damaged through their stupidity, because everything depends on the owner of the device. So keep your distance from these scammers, you need to understand that earning money is not that easy because a scammer makes their money an easy tool from which you need to be protected.

There are simple steps to stop automatic download feature on WhatsApp people could check it here if they don't know how to do it https://drfone.wondershare.com/whatsapp/how-to-stop-auto-download-in-whatsapp.html

But I really don't like to use that app since somehow its not convenient app to used at my end.

Since the number of attempts is growing which is somehow expected knowing crypto fame is growing its better for people to be aware on the tactics used by scammer so they can avoid any potential threats that can harm them.

In this era the more we connect with our loved ones, friends and family, the main source or the most used source is WhatsApp and Telegram. But since anything is used more often, it becomes easy to fool us or get scammed on it. This is the reason why a person who is not very educated is also active on WhatsApp just like a more educated person. But the problem is that when you do not understand you are going through things in your routine and every new thing seems beneficial to you but basically it is a loss for you, so we bring this loss on ourselves because it is difficult to earn money, but it is even more difficult to protect it. So if you want to keep yourself safe then apart from that, there is a resource like Telegram, then you have to keep yourself active and have a proper knowledge about this thing. How can you avoid scammers on it?

I'm a bit skeptical as the original article lacks any details or proof by what exploit code execution would be possible somehow embedded in images. Such a vulnerability would have a very high score as it seems to allow remote code execution without user interaction.

So what vulnerability is exploited in the context of WhatsApp? I mean there have been severe vulnerabilities in media or image frameworks, but not even a tiny explanation is provided in the article. I'm sorry but as it is, it's kinda click-bait. The article blabbers with steganography and embedding malicious code with it in images.

Now, why would WhatsApp decode steganography hidden stuff from such images? C'mon, seriously? Who believes this crap? If such a flaw were actually in WhatsApp and mobile phone frameworks, we'd have much more serious problems than the reported "victim" from Jabalpur.

Any new platform for interaction in the social space is a potential medium that hackers and scammers will employ to carry out their activities.

I am not surprised about the information about WhatsApp. I think that people should even be smarter and be less likely to fall for these guys when using WhatsApp because in using WhatsApp, it is mostly your close contacts that you have there. And if an unknown number sends you a DM, you can ask them to identify themselves. If they fail to prove that you have had prior interactions, you can block them.

This is not even WhatsApp's fault. Meta has done their best to protect their users and even put in several means to ensure that users stay safe.

Everyone needs to be careful.

They are on every platform as long as there is a potential victim. I think that it's not only WhatsApp that gives that blurred image for the users to download when they receive it from a random person.

That is the reason if you are not aware of these tactics, you're likely to fall from it. Don't give these scammers or random people a chance to scam us when we can ignore them from the very start as soon as we see their messages and we don't know them.

But because of curiosity, we're going to click and download it not knowingly that it contains a malware, a file that we shouldn't download and install.

Scams have become more severe and sophisticated, not having any knowledge on security greatly fixes an individual at a disadvantaged position, a position where they will find themselves to be regular victims of cybercriminals.  Some security tips are changing because they have become less useful, but there are others that although they are old, they still remain useful and will remain useful in the future.  One of these tips is not giving an audience to strangers who send you a message, in this kind of recent situation, an image. If you are sent an image by an unknown source without notification or explanation, resist the urge of trying to open it.

This might solve the problem but what if the image is from someone you know who doesn’t know that the image is infected by malware virus and share them to you for further enquires or explanations?

Are there ways to know about all these malware images to avoid clicking them completely?

This internet is not a safe place to save your Bitcoin because scammers are everywhere trying get money from crypto users, as such, they are always creating chances of scamming people through various ways that are unimaginable.

Thank you for this information, it is new to me, but prevention is better than cure.

Installing antivirus software can help detect images that contain hidden malware. If an infected image is automatically downloaded to the phone, the antivirus will scan it, and if it detects malicious software, it will automatically delete it.

It’s good that everyone is now aware of this tactic used by scammers, that any image can be embedded or infected with executable malware that activates as soon as the image is opened and gets installed on the device without the user’s knowledge. This is extremely frightening, and it shows the importance of storing crypto assets in a completely offline manner, as scammers' methods have become more sophisticated and effective than before.

Hack ks not an entirely developers fault, so yeah dont mentioned WhatsApp in this making sound as if WhatsApp is vulnerable in a way, which is not true about whatapp, between we need to accept the responsibility as the end users of our devices and the app on them so we are more to get the blame and not the channel the scam/hack get to us.

Let us not forget all this fact so as not to misunderstand the whole thing shifting blames and missing out the lessons.

We should just accept that no system is 100% trustworthy on maintaining the privacy of its users therefore we should be very careful with the kind of information and data we share on the internet because even if private chats are end-to-end encrypted but it doesn't mean that one's private chats and files cannot be compromised. And yes, we cannot blame the developers of those platforms for guaranteeing us security as every other platform we do the same just to gather enough users who will believe them and make use of their messaging platform. I don't think that Whatsapp is highly porous about the privacy of its users that is why when you are using WhatsApp, there are some actions you will want to take that will prompt you to grant it access such that when you do that, whatever happens is at your own detriment and not to blame the app developers again.

From the history of WhatsApp ownership, it has never belonged to a Chinese organisation that I'm aware of; both the developers were all American somehow, one of them is Ukrainian but later naturalised in California, and the other is also an American.

Currently WhatsApp is being owned by the same meta company (Facebook), which you prefer their messenger over WhatsApp. There have been some changes in the app, which they are somehow trying to integrate same idea that Meta shares with WhatsApp, but both spaces are not entirely scam-free.

It feels terrible to take note that the scammers are diving into other unknown methods that are not well known by people. How would millions of people who use WhatsApp not fall into this type of scam when images sent can be easily downloaded.

Thank goodness whatever methods the scammers come up with, there is a solution to counter it when applied.
@Churchillvv you did well for letting out this solution. I am applying it, to let other people I know to apply it also on their WhatsApp settings

Well... Whoever that may own whatapp is not the point now and not even the discord and telegram can we say the platform is secured enough that hackers and scammers won't use a medium to target their victims.

We have seen all that discouraging and insecurity stories across telegram and discord, Facebook messenger is also one which social networking alone that connects the known and unknown people together is said to be flooded with scammers on disguise (impersonating).

I can not recall how many times the unknown has sent me malware links there on messenger and having view on their profile is not doubtable at all that they are scammers.
Or all communication networks mentioned here, Whatsapp has been the best secured among them because you can only be located to whom you exposes your number to with the end-to-end security encryption.
The fact is that... No platform is 100% secured and that is why we should always be observant to help ourselves.


All platform are vulnerable but users security enhancement when hovering across the internets and carefulness of how we handle our device (access to a third party) determines level of security and Privacies. As for how this Whatsapp malware image works is that until it is downloaded, it would not have existing permission in your device since it is not accessible for visuality yet.m, it is assumed not existing yet.

And we must not underestimate hackers because they goes behind learning even far ahead of the app developers and that is why they are likely to succeed in so of their targets.
Even the Blockchain such as the centralized wallet is not safe which we have as well given count of multiple attacks times the exchange networks has been hacked.



Nope, the version of Whatsapp that is to withstand by detecting such malware program has not been developed and that is why technology experts has warned users to be more cautious for now until the advanced version is launched.
But for now still on process so don't think you are protected because you have the latest version and even if you do, extreme caution should always be observed. Like I said, hackers are always studying ahead to maneuver the developers security servers.



This is a technical and logical issue and because we either can not imagine the possibilities of scammers using a common image to compromise our device and cybersecurity is why it maybe skeptic to us.
Perhaps steganography is a very highly integrated machine tool embedded to keep contents secret so, it will always be beyond our imagination unless you are steganographer of having technical knowledge of the system.

Very possible. That of Whatsapp might just be trending or revealed that hackers are targeting it users probably because someone has already been victimized after installing the malicious image through WhatsApp. So logically other platforms could be randomly targeted.


The internet war has come to stay nomatter how preventive we might tend to be observed because even the vulnerable will somehow contribute to the spread of the internet virus due to their lack of knowledge.

So in that case, having antivirus on our devices may help to an extend while avoiding files or information from the unknown will serve better Or probably avoid opening files that source has no explanation about despites the familiarity.
Your can also g :)et a separate device and store your valuable files such as your wallet and others so, you don't associate your valuable storage device with that you uses to access the internet for your casual or social activities.

This is not to be blamed on WhatsApp whatsoever, but on the carelessness of the victims or intending victims. And this has nothing to do with the end-to-end encryption, they are different things.

WhatsApp is not an antivirus, so it's not responsible for the security of your gadget. That's why you should be aware of the havoc that what you download or the link you click on can cause. This is not the first time people have been downloading malicious programs through online communication, so WhatsApp shouldn't be blamed for any reason. We are responsible for the safekeeping and protection of our gadgets.

They must know their responsibility on how they can make their selves safe from any potential threats that can possibly cause them harm.

There are lots of attempts would provably come up and we must be aware about simple logic that if anything is to good to be true its not true for sure that they won't get scammed easily by those criminals intent to harm people and take advantage with their innocence.

WhatsApp is not responsible for any harm they might encounter and they must know what has been implemented on that platform so that they also would know what to do and how to became a intelligent user of that app.

Right! it could obstruct a lot for guys who use WhatsApp as regular contact however, one can use the second option which is only download images on will. that is more practical as you can point out who is sending you an image and if it's from an unknown contact then one would skeptical about it and avoid downloading it.

Rule number 2; never you think it can't happen to you, if guys with high tech knowledge can fall victim of different scam or malicious attacks, you shouldn't ever think your immune to this and the victims are careless because one could be careful but the evolution of attacks could beat your awareness which is a good reason OP posted this as an awareness/warning.

Off the top of my head, I can suggest some ways to avoid data theft via WhatsApp:
- Store data on your phone that you don't mind losing.
- Use a 2nd phone to interact with the crypto and follow the rules of Internet / computer hygiene. In particular, don't use WhatsApp or similar vulnerable applications.
- Disable automatic image (data) loading so that such files don't open automatically when received from unknown numbers (which may include attackers).

Don't twist it, it's not worth it, for I simply don't get your twist.

Are you personally advising me? I guess not, you don't have any reason to direct it to me because I didn't prove immuned here. I never said anyone can't be a victim of an online scam/hacking, but I advised that we should do our part to the utmost, for us to keep ourselves safe from online activity.

I guess the above was a caption of @Churchillvv triggering his opinion/insight.
If I must be emphatic here, If you don't get me mosquito too @EarnOnVictor, in this communication or interactive platform, informations can still be passed either by advice or otherwise.
What matters is "providing and grabbing rightful information". So i suggest you accept @Churchillvv contribution likely and not being neglected.

To be honest, it sounds like an abuse on the victims leaving them seem like low esteems with the word "carelessness".

However, there is no big deal to keep riding here because If I understand you correctly, you mean users being concious of scammers with their schemes will help to stay free being victim but when we feel reluctant even while being aware of the insecurity threats, we could befall the victims.

Meanwhile...@Churchillvv is also giving it a backup that the race of staying free with the hacking schemes evolution is challenging because while you are being alert of an existing/discovered scammers tricks and you stick to be careful of it, there could be some other schemes which we might not be aware about which means... Everyone is in the pull of scammers target where the  unknown schemes remains unrevealed to us.

So I guess both of you guys are still up to good updates and indeed, the fear of the "unknown scammers schemes" should always ignite us to stay watchful and suspicion at any propelled looking too good to us when it comes from unfamiliar sources and as well avoid what seem unnecessary to us because one can just decide to download such a malicious images probably due to it graphic beautifications without being aware of the unauthorized malicious operations it was going to run in our devices without our awarenesses.

Over the last couple of days, I have had certain prompts I was sure not to have initiated, requiring me to enter code and link new device.


Now, I know this to be typical of IOS device users and for desktop/laptop computers where you can have your WhatsApp functional on multiple devices but, I didn’t initiate this so what I did, I just left the link alone. Didn’t let my curiosity drive me to click the link to see what it’s got, I just allowed the motivation be until it went out of existence.

I had several of these, numbering 3-4 times a day within few days of the week until the attacker gave up. Probably found out I’m well informed maybe but, didn’t want to test myself.

At the moment, I haven’t got a need to worry. Curiosity kills the cat they say, that let that be your case when you can simply ignore.

If I'm a mosquito, then you are a tiny worm. At least mosquitoes can fly, can you? Next time, reply with sense, caution and mutual respect when replying to me, or you don't bother at all. It's not difficult to know those who lack tolerance, you shouldn't see things differently from them.

Continue to pamper misrepresentation and carelessness, it will help the victim to be cautious next time.;D Does this one even know what he's saying? Excuse me!

WhatsApp users have increased a lot, which is why criminals have taken notice of it. They can lure you into clicking on the fake links they send in various ways, such as financially, but once you fall into their trap, they will be able to steal all the information on your phone and if you have bank accounts or anything important, they will steal it all.

You don’t need to worry about your images downloading immediately through WhatsApp when sent. Just go to your settings on WhatsApp, then go to ‘storage and data’; under it you can see the option of ‘media auto-download’ which beneath it you can also found options like photos, audio, video, documents and besides them is an option to on or off them. You can toggle them off all so that your images and other medias when sent are not auto-downloaded, it can at least help not downloading any image from an unknown source or a source you’re doubting their message from.


This scammers keep changing their ways of scamming people, so if you’ve learnt about one in the past on how to avoid them, it is better you still remain very up to date, to avoid being scammed using updated means of scamming which they bring up from time to time when the former one doesn’t work for them anymore as people getting to know and already avoiding getting scammed by them. Be up to date to avoid falling for scam in this space.

I think this is the third or fourth time I've seen someone ask how they can avoid auto-downloading malicious files from the internet. I guess apps like WhatsApp or Telegram need to advertise their disabled media download more often, considering how many people don't look for that option on their own. I can understand if the user is a bit older and is not curious to try new things, but it's a surprise that youngsters also don't know about it.

People need to be more educated about such threats on Internet and know how to turn off such automatic download features. This security-wise practice can help them reducing more threats that can compromise their devices and accounts but there is another security-wise practice that is more important in my opinion.

Avoid using those applications as most as possible.
Don't install those applications on devices you store your bitcoin or cryptocurrency.

If you ignore those two steps, there is risk of your device, account and wallet compromisation some times in future. It's better to prevent it at start than relying on antivirus softwares for keeping your devices clean.

First heard about the WhatsApp virus from PDFs, then Photos and Videos. Maybe this technique is already familiar to us. But it's hard to detect early on. WhatsApp has also warned me if I download PDF documents. But indeed for photo or video files so far I have not received a warning. It's probably best not to turn on the auto-download feature and not open suspicious messages. It seems that a paid anti-virus can also be a solution to the virus.

It seems they are now targeting most the of the communication tools nowadays haven’t experienced yet with their application and also even any message came from unknown people wants to connect i do completely ignore as possible and does not show any kind of interest this will be serve as your boundaries and limit as possible to prevent this kind of attacks. Most of the cause of the losing funds and attacks came from users mistakes.

I heard the news from my mom. She told me that when we are open a Whatsapp group and there is a call on the group, we don't have to click the call button and join to that. Because in a few moments later, somehow will steal your bank account and take your money. I don't know how the stealer do that but I remind my mom not doing anything and if she want to call someone, he can do that by chat privately. We don't know how the scammer or stealer (I call that) work but I am sure they will trying so many ways to run their trick. Only carefully that will help us to avoid them.

This is not new, but they just transfer to another application using a executable file when click or downloaded, before the issue is about receiving an email from a known source which they infected at first, then sending it to another victim and it becomes a cycle, they are now trying to steal from people who use other application this is why reading and being active and read news about hacking and stealing is very important, don't believe everything is secure, always have doubt about securities especially if you have money on it.

By default, WhatsApp download images automatically over cellular data or WiFi but you can disable this feature in settings>storage and data>media auto download. You can disable all sorts of media (pictures, videos and audios) from being downloaded automatically but you can not disable voice messages from auto download as per WhatsApp policy.

I read somewhere where someone was boasting about sharing a malicious file with the name "salary increment structure" via WhatsApp so that people can be interested to open the file and that's how it could affect their devices and data. I'm always careful especially in general groups on WhatsApp and I don't rush to download anything shared unless I see others comment on the file shared before I download it.

In that case, WhatsApp service provider to consider running adverts in calling of it community users attention in the decision about the disability of the automatic download of images or files in the platform as a significant to prevent unwanted files to automatically download itself in users devices, it may not do better because not everyone are attentive to adverts because they sees it as a waste of time that to the platforms interest is just of marketing skills and to the local mindsets, they feel satisfied with the services the platform if offering just as long they are able to sent and receive informations from other users which does not interrupt their communications.

So, the way forward to amend this auto download that had become threatening for users security and privacy in both those who are learned and unlearned is for the WhatsApp service providers to stop the auto download from the server end.

Then whosoever that want the auto service should set it on their own.
Then, it will be believed that whosoever taking the decision has the inconveniences behind it upon themselves which I believe majority won't bother going for the auto service while manual downloading options by just clicking the image will be more friendly to be used.


That will serve better because that of adverts won't speculate round to the awareness to the entire users dur to illiteracies and ignorants exhibitions as human being.

The same thing also happened some time ago, namely scammers started using the Whatsapp platform to launch fraudulent actions with the mode of party invitations, and this news was a big deal in my country, because several people experienced the loss of assets on their cellphones, including my friend who had downloaded and installed it. Whatever type of fraud is there, you have to be careful, do more security, especially for whatsapp use security features such as "Protect IP Address in calls", "Disable link previews", "Block unknown account messages", do "Two-Step verification" , turn on "Security Notifications", and activate "Passkey". I have done all of these things, and so far I am safe because of them.

Some similar cases:

- BBC News - Mum's warning over WhatsApp Christmas party scam (https://www.bbc.com/news/articles/cm2emvjn0d7o)
- Economictimes - WhatsApp fake wedding scam can steal all your money with one message - How it works and how to stay safe (https://economictimes.indiatimes.com/magazines/panache/whatsapp-fake-wedding-scam-can-steal-all-your-money-with-one-message-how-it-works-and-how-to-stay-safe/articleshow/115266324.cms?from=mdr)

'to steal users Privacies and funds', as if WhatsApp ever offered any form of 'Privacy' to its users.  If anybody believes it, do not be surprised to later find out it was never really true.

Almost anybody I know would download a random image received through WhatsApp, who would ever even think it may lead to serious consequences such as getting your phone infected by it?  In my opinion, we live an era in which we should REALLY start separating again private life from the public.  Humans did not have this problem decades ago, we only have it now because we have EVERY THING in our phone, private or public.

Security and Privacy education is really, really bad and I believe we need a VERY long time before we start noticing a little difference.  Convenience is permanently close to you and so tempting, it becomes very hard to give it up.  And I do get why.  If we all had stalkers staring at us and physically following us every where we go, we would care.  But because these 'stalkers' harvesting your data are invisible and unnoticeable, it became so normal it is scary.

From simple private notes and banking all the way to nude pictures and a chunky browsing history with all the fingerprints and behavior, nowadays it is all there in only one place.  This means you land in big trouble if your phone ends up becoming compromised.

Separate them, you will be thankful!  Not only will you be stress free, but you will also learn again to enjoy life more, like you used to.

Have they ever done that? I don't think I can recall a single ad related to security from them, other than emergency notices or articles talking about the best tips and tricks for security or something similar. Sometimes they do explain what settings are important and the risk if someone enables/disables it, though, although most of the time it's related to their data collection activity. Unless a major incident happened where we can accurately blame WhatsApp or any service for a lack of security, I don't think they'll really prioritize issues like this.

The Privacies surrounding WhatsApp is not to protect users device but protecting it users Privacies specifically on the platform such as the end-to-end encryption observer.


In same cases, scammers and hackers will always aim to launch their targets on the undisclosed systems by taking us unaware which is the reason why we should back out gadgets with anti scam softwares and also our responsibilities to act sensitively with unfamiliar files from unknown or untrusted source.

WhatsApp does not give guarantee of your gadgets maintenance or Privacies neither security but rather poses the characters on it platform.


Rather still... We have these highily threats today because the world is evolving and we are quite advancing in technology.

I've not seen any related hacks been carried out because it sound almost impossible to lose funds on WhatsApp unless there is more that I don't just get.

If getting hands on information through WhatsApp is all these hackers want then they will get nothing, I believe they just use WhatsApp to get into your phone is all, because what can you share on WhatsApp that will make your money to dissappear?

Nudity? Sure
Location headed? Yes
Someone's information and whereabout? Yes

But money related? Hell no, WhatsApp is not your bank account, or do anyone keep their bank login details on WhatsApp? No, because you don't send such information for anyone else.

Not even Crypto keys are storable on WhatsApp, some please tell me where I am lost here.

Definitely there are a lot you and I don't get when it get to do with hackings. They are usually coming with different strategies without getting us on their target informed while we only get informed when victims have been recorded just like the one from Jabalpur who lost his fund on the course of downloading malicious image on his device.
And you have to believe it that there are still numerous means these hackers and scammers are stealing victims funds and invading on their Privacies which may have not been discovered yet and until then, we just can not just imagine a sort of that to happen.


This has been cleared repeatedly here that this scammers concept is not practically carried by the act of having access to your WhatsApp but uses the WhatsApp platform as target since the platform supports a system of auto downloads of images which after victim at target has installed the image on their device without knowing how poisonous it was, the malicious image then installs the malware program on the device which grants the scammers access to your device Privacies unknowingly to you on target and then do whatever they want as much as they can access your Online accounts logged on in the device.

So, where is the proof for this attack claim? And I don't mean articles which only make assumptions themselves. Taking into account how large the user base of WhatsApp is, such an open attack vector would be a major issue. Nonetheless, I don't see such a hot topic in malware or intrusion research circles.

There have been a lot of vulnerabilities in media frameworks of mobile devices, yes, and once something like this is recognized, it's usually quickly fixed because of widespread use of such media framework components and thus possible attacks if vulnerabilities are left unfixed.

You are right to be doubtful about claims of widespread easy attacks on WhatsApp as such big problem would be widely known in cybersecurity world and quickly fixed. While there are not usually open ways for just anyone to attack WhatsApp there have been highly targeted attacks like those using sophisticated spy software which are quickly patched by WhatsApp. Also like any software WhatsApp can have flaws in its parts but these are usually found and fixed fast. Main difference is between general way to attack and specific hard to find flaw that is used for very targeted attacks.