WhatsApp now the new platform targeted to steal users privacies and funds.

[EluguHcman]

On-line fraudulent and hacking schemes is getting so alarming these days as future scamming schemes becomes unimaginable to us.
The awareness of how sophisticated Links and OTPs has been threatful to our devices as the most tricky way of scammers getting access to our devices to steal our private data's and funds has gone outdated and now comes to where downloading just an image through WhatsApp now becomes the new formate.
WhatsApp has now become a targeted platform because it is known most common means people feel comfortable to communicate and shares informations due it usability and end-to-end encrypted system.

As report to this new trend says, "a resident in Jabalpur who was sent an image by an unknown source (number) has already been victimized with this concept loosing about ₹2 lakh after downloading the malicious image and then it installed the malware tool in the victims device to do the "data exfiltration job" while victim have no ideal if such software is existed in his device".

Meanwhile... Cybersecurity engineers has warned Whatsapp users to exercise "safe online behavior" by not taking just an image too common as you may have think it won't be harmful since it is not accompanied with links or other conventional strategies that we only finds suspicion to override our device and wallets Privacies.

https://m.economictimes.com/news/new-updates/not-otp-or-links-but-hackers-now-use-whatsapp-images-for-fraud-check-details-here/articleshow/121393609.cms?_oref=cook

[Churchillvv]

I haven't really seen anything of this nature because I know WhatsApp to download image automatically as long as one has data connection, how then can one avoid it being downloaded? it's very scary at this point because I use WhatsApp and the images are just downloaded without ones permission. However this monitoring private key stealers have a way of it's operations and some threads before have educated us on how to avoid them.

Furthermore, the internet is not a safe place but one should observe every security measure that is good enough to help us stay safe.

[lovesmayfamilis]

Heh. What about the developers' statement that WhatsApp is a very secure and confidential manager? I remember these screaming conclusions when there was a comparison of Telegram and WhatsApp security. However, there is no difference; in our time, everything depends on the device's owner. If he is stupid, does not read the news, is not interested in security rules, and is very trusting, he will fall into the trap of scammers, just out of nowhere.

[hopenotlate]

Ouch, this is really worrying and scary. i had heard in the past about trojans that could be installed on your mobile device just by tapping on the preview of an image within a whatsapp conversation to view it in full, which were mostly used by the judicial authorities to put the phones of some suspects under surveillance.
reading these articles makes me want to go back to the old and beloved dumbphone (whose battery lasted a week, by the way).

-snip -  I know WhatsApp to download image automatically as long as one has data connection, how then can one avoid it being downloaded? it's very scary at this point because I use WhatsApp and the images are just downloaded without ones permission.

This is indeed a good question : anyone has a clue?

[EluguHcman]

I haven't really seen anything of this nature because I know WhatsApp to download image automatically as long as one has data connection, how then can one avoid it being downloaded? it's very scary at this point because I use WhatsApp and the images are just downloaded without ones permission. However this monitoring private key stealers have a way of it's operations and some threads before have educated us on how to avoid them.

Furthermore, the internet is not a safe place but one should observe every security measure that is good enough to help us stay safe.

You can manage your WhatsApp file downloads by disabling the automatic download. Then files can only be downloaded by your permission where it Will be manually downloaded by your instructions.

Getting this done, get to your WhatsApp "setting"  and follow the process because I can not give you a step by step guide since I don't know the model of your device.
Perhaps don't feel lazy or negligence to do this to avoid awful stories.

[Churchillvv]

-snip -  I know WhatsApp to download image automatically as long as one has data connection, how then can one avoid it being downloaded? it's very scary at this point because I use WhatsApp and the images are just downloaded without ones permission.

This is indeed a good question : anyone has a clue?

[Solution]

Since OP only brought the recent scam and monitoring malware awareness without a possible solution to it, hence I have took my time look into WhatsApp and find some possible solution.

[1] Since most of this scammers get contacts from groups and other places where one exposed their contact Without ones awareness it's best to head over to your WhatsApp settings > Privacy > Advanced > Then enable Block unknown account messages.


[2] Since images download has an option of enabling and disabling, hence head over to WhatsApp settings > Storage and data > media auto-download > There are options of [When using mobile data, When connected on WiFi, When roaming.] > Click on each of them and un-check the image options and any other thing you do not want to download automatically on each of the options.


I believe this will be helpful to everyone, however I do not know if creating a separate thread on this guided with extensions on explaining the solution or just leaving it here?
Edit: Op has given his solution above.

[hd49728]

On-line fraudulent and hacking schemes is getting so alarming these days as future scamming schemes becomes unimaginable to us.
The awareness of how sophisticated Links and OTPs has been threatful to our devices as the most tricky way of scammers getting access to our devices to steal our private data's and funds has gone outdated and now comes to where downloading just an image through WhatsApp now becomes the new formate.

You can check whether Whatsapp has customize setting to disable automatic download. I don't use Whatsapp so I don't know but in Telegram, you can disable this feature if you are very careful with your devices.

In Telegram, for example
https://techviral.net/disable-auto-media-download-telegram/

It seems you can do the same with Whatsapp but you must check it.
https://www.guidingtech.com/stop-auto-download-in-whatsapp/

[EluguHcman]

Heh. What about the developers' statement that WhatsApp is a very secure and confidential manager? I remember these screaming conclusions when there was a comparison of Telegram and WhatsApp security.

Every developers will always hype their sites or softwares especially when the community users are concerned of their privacies which category would also be a priority to the developer to also consider.
This could be a privacy-first marketing approach. So, we don't need to entirely trust statements driven to the conclusion that the platform is impossible to be compromised.

Brian Acton and Jan Koum developed Whatsapp with the very high secured software program "end-to-end encryption" that is basically to protect user Privacies from the platform. Meanwhile... This scamming scheme is not targeted just to get your WhatsApp data's but getting access to your device where your device informations including your documents and private keys is being extracted with the scheme of the malware image installing itself in the device.

So literally Whatsapp is only used on this regard to install the malware software in your device.
And of course this sophisticated scheme can be possible to target some other platforms but I think Whatsapp is a target here because Whatsapp is likely a dominance in the communication market.

And for this threats sake, the current Whatsapp will enroll on updating to advanced features where such trick be spotted.
So in sequence to this advanced request, developers is already submissive that the platform is not guaranteed to be uncompromised. So to curve this, it will be needful for users to update their whatapp when the developers launches the new version.

That is to say... Developing this new version is a key reason of identifying such phishing threats so that users can always stay aware but while scammers are also studying too hard to breach securities projecting the current version of whatapp or any platform, developers could be taken unaware not untill the scammers has gained access or phishing sensitivity is being observed then could be when developers may tend to provide an advanced version just as what is ongoing with this scheme of malware whatapp images as an avenue to intrude into our Privacies.

[ABCbits]

It's one of few cases where people with common security awareness would become a victim. WhatsApp should've prevented script/program inside image from being executed. While the news doesn't mention it, i wonder whether this vulnerability still works if you disable certain permission on WhatsApp.

[1] Since most of this scammers get contacts from groups and other places where one exposed their contact Without ones awareness it's best to head over to your WhatsApp settings > Privacy > Advanced > Then enable Block unknown account messages.

That's good idea. But it's not practical if you live on place where WhatsApp is very popular where legitimate people (such as recruiter or delivery courier) is likely to contact you using WhatsApp.

[EluguHcman]

-snip -  I know WhatsApp to download image automatically as long as one has data connection, how then can one avoid it being downloaded? it's very scary at this point because I use WhatsApp and the images are just downloaded without ones permission.

This is indeed a good question : anyone has a clue?

[Solution]

Since OP only brought the recent scam and monitoring malware awareness without a possible solution to it, hence I have took my time look into WhatsApp and find some possible solution.

[1] Since most of this scammers get contacts from groups and other places where one exposed their contact Without ones awareness it's best to head over to your WhatsApp settings > Privacy > Advanced > Then enable Block unknown account messages.

Regardless to personalizing our Whatsapp incoming messages with others incline (blocking unknown users messages), be guided that the WhatsApp group you may belong is also not secured because there in the WhatsApp group, you will experience unwanted recommendations such as invitation prioritizing marketing where links and images are being flooded if the WhatsApp group members are not coordinated on the basic obligations of the group.

And therein, not every informations could be trusted so, it is also wise to be careful on that note while deactivating your media auto downloads would always help you on a concept as detailed of this thread.

Also, don't click or downloads images that the sender did not give a description of the image in the first place. That is when you have a limited trust level with the user without undermining your familiarities.

So as for now, "Don't step on informations that has no earlier explanation" while your watchword remains "concious" with your device and your online engagements.

[rachael9385]

You are right mate, this already what I wanted to say immediately I was reading the thread. You have already said the actual solution to solving this issues of unknown person sending you messages or links on WhatsApp.
I think, if one is Smart enough, they can easily set their WhatsApp to block unknown number from sending them messages and also proceeding their IP during calls.

[Cookdata]

Heh. What about the developers' statement that WhatsApp is a very secure and confidential manager? I remember these screaming conclusions when there was a comparison of Telegram and WhatsApp security. However, there is no difference; in our time, everything depends on the device's owner. If he is stupid, does not read the news, is not interested in security rules, and is very trusting, he will fall into the trap of scammers, just out of nowhere.

As long as a platform remain centralized and all servers are been controlled by one entity? There is likely a point of failure in the future. How many times has Coinbase hacked and data breach happened, they are right now been sued because of the recent breach of data that happen some days ago. This social platform don't get attack that much like other ones because they are not financial institutions that handle money related else I'm very confident that we are going to be having series of episodes from these companies and things that are happening behind the scenes.

The only thing I can grasp here is as a WhatsApp user, don't share any sensitive information on WhatsApp even when they claimed there data is encrypted and "bla bla", if government can approach them for information and they give out, there is nothing sensitive safe with that platform. I can only imagine these feature of "me" in contact where I do forward some forward message, if people use that to save seed phrases or private keys, then they are doomed. There is 99% chance that many people are using the feature to save sensitive information.

[cryptoaddictchie]

I used whatsapp before when I was on Malaysia since its their go to app for socials but I didnt like it compared to messenger of facebook. It seems theres so much suspicious on their apps. Probably due to their unfiltered system. I believe this app is a Chinese Product if Im not mistaken.

Actuallt I prefer discord or telegram over this app.

[The Cryptovator]

I think it's not new; I have received such messages from the beginning of using WhatsApp. Usually at that time they invited some Ponzi and scam schemes. They became kind of angry when I refused to join them. They provide links, etc., but I haven't bothered to click; I just ignored them and blocked them if they don't stop messaging me. So they can't attack me, and I was safe since I wasn't greedy that time. Even if they offer a high return, I just ignore it.

These days it seems that this type of image attack is happening. I have seen more such threads where scammers have been trying to scam innocent people. They usually collect mobile numbers from data breaches. So try to avoid any greedy offers and don't open any link provided by an unknown person. Otherwise, you might fall into their trap.

[Obim34]

it's very scary at this point because I use WhatsApp and the images are just downloaded without ones permission. However this monitoring private key stealers have a way of it's operations and some threads before have educated us on how to avoid them.

Adjust your media download settings from your WhatsApp to only download images when permitted.

I used whatsapp before when I was on Malaysia since its their go to app for socials but I didnt like it compared to messenger of facebook. It seems theres so much suspicious on their apps. Probably due to their unfiltered system. I believe this app is a Chinese Product if Im not mistaken.

Actuallt I prefer discord or telegram over this app.

WhatsApp does more security than telegram, i don't know much about Discord but i make use of WhatsApp and the options of securing yourselves from unsupported conversations is free unlike telegram that demands you to use their premium feature. If i don't give out my number, no once can add me up, message me even through groups, i set my restrictions too well.

[cryptoaddictchie]

WhatsApp does more security than telegram, i don't know much about Discord but i make use of WhatsApp and the options of securing yourselves from unsupported conversations is free unlike telegram that demands you to use their premium feature. If i don't give out my number, no once can add me up, message me even through groups, i set my restrictions too well.

It is? Im not sure though but there are some red flags when I use whatsapp. Yeah telegram isnt safe either but I think its more used by many, I am using it due to crypto related stuff and communication to some airdrop projects. What I dont like about it its swarming with scammers dming you.

[Obim34]

WhatsApp does more security than telegram, i don't know much about Discord but i make use of WhatsApp and the options of securing yourselves from unsupported conversations is free unlike telegram that demands you to use their premium feature. If i don't give out my number, no once can add me up, message me even through groups, i set my restrictions too well.

It is? Im not sure though but there are some red flags when I use whatsapp. Yeah telegram isnt safe either but I think its more used by many, I am using it due to crypto related stuff and communication to some airdrop projects. What I dont like about it its swarming with scammers dming you.

Yes, WhatsApp seems to be more secured since communication there is more to private connections. What exactly are your red flags in WhatsApp?

Telegram is a den for scammers, practical example is when i had issues with funds deposited to my exchange which i contacted the support team through telegram, in less than a minute i received too many support reach, all are fake profiles pretending to be admins, we can find more scammers in telegram than in any social app. If not for joining groups many people won't be making using of telegrams for communication purpose.

[Porfirii]

I haven't really seen anything of this nature because I know WhatsApp to download image automatically as long as one has data connection, how then can one avoid it being downloaded? it's very scary at this point because I use WhatsApp and the images are just downloaded without ones permission. However this monitoring private key stealers have a way of it's operations and some threads before have educated us on how to avoid them.

Furthermore, the internet is not a safe place but one should observe every security measure that is good enough to help us stay safe.

You can manage your WhatsApp file downloads by disabling the automatic download. Then files can only be downloaded by your permission where it Will be manually downloaded by your instructions.

Getting this done, get to your WhatsApp "setting"  and follow the process because I can not give you a step by step guide since I don't know the model of your device.
Perhaps don't feel lazy or negligence to do this to avoid awful stories.

The problem is that I like the automatic download feature it is sad to think that because of malicious people I have to be careful with the choices I make, even if they are the ones offered by the official provider (in this case WhatsApp, but where else?). And even in that case, there is no way we can be 100% safe.

I heard a few weeks ago that it was recently discovered a vulnerability that led to getting infected by simply receiving an SMS, even without opening it. Just by having your smartphone turned on. It seems that these attacks were reserved for very important targets, but still.

[Mrbluntzy]

Thank you for sharing, I didn't know this can also be possible via WhatsApp, I only thought it's through email that an image containing virus can be sent because I have read about that some time ago. Scammers are doing everything possible to steal from people and the only way to stay ahead of them is by having this informations on time before we become victims already. That was how some random number set me a message on WhatsApp some weeks, telling me that they have a platform that can enable me work from home and earn very well by just working 2 hours in a day, I engage in the conversation but at the end, they were scammers because they wanted me to pay a registration fee which I declined.

[Myleschetty]

I used whatsapp before when I was on Malaysia since its their go to app for socials but I didnt like it compared to messenger of facebook. It seems theres so much suspicious on their apps. Probably due to their unfiltered system. I believe this app is a Chinese Product if Im not mistaken.

Actuallt I prefer discord or telegram over this app.

The app is technically a Chinese product because it can gather and share user data with Meta (formerly Facebook) for analytics and advertising purposes, making it not a fully end-to-end encrypted platform. Their end-to-end encrypted service is not guaranteed to work even if they are able to share such information.