ISLAMABAD (Web Desk) – Pakistan’s National Cyber Emergency Response Team (NCERT) has issued a high-alert advisory warning of phishing and malware attacks targeting government officials and individuals handling sensitive information through WhatsApp Web, desktop applications and email.
According to the advisory, cybercriminals are impersonating government officials and departments to distribute malicious files disguised as legitimate government documents. Opening these files could compromise Windows systems, potentially allowing attackers to steal passwords, access confidential information and gain remote control of affected devices.
The warning also highlights the risk of WhatsApp Web session hijacking, which could enable attackers to impersonate users and exploit their accounts to target contacts or access private communications.
NCERT cautioned that unexpected files or messages from familiar contacts may indicate a targeted cyberattack. Users were also advised to check WhatsApp’s linked devices list for unfamiliar sessions that could signal unauthorised access.
Officials advised to avoid WhatsApp Web on Windows
The advisory recommends that government officials and others dealing with sensitive information avoid using WhatsApp Web and desktop applications on Windows systems.
Users have been urged to terminate suspicious linked sessions immediately and independently verify unexpected messages, links and attachments before opening them, even when they appear to come from trusted contacts.
The cybersecurity team also warned against sharing passwords, one-time passwords (OTPs) or verification codes. WhatsApp files should not be transferred to official Windows computers without appropriate security checks.
Security measures recommended
NCERT has advised users to install the latest updates for Windows, web browsers and other software to reduce exposure to known security vulnerabilities.
The advisory also recommends enabling two-factor authentication and WhatsApp’s two-step verification feature to strengthen account security and make unauthorised access more difficult.
Users who suspect that their devices have been compromised should immediately disconnect them from the internet and other networks. They should preserve relevant messages and system logs as evidence and avoid reopening suspicious files.
The warning underscores the importance of strengthening digital security practices, particularly among government institutions and personnel whose devices may contain sensitive official information.
