WhatsApp scams without clicks: Ertzaintza recommendations after 359 cases detected

Without a single click, this is how the scam known as "zero click. "Since June, reports have soared in the ACV: 359 cases detected by the Ertzaintza, all of them in the IOS mobile phone operating system and through the WhatsApp app app.

As a result of the scam, the infected phone sends messages to the user's contacts asking for moneyto "respond to an emergency." The attack gets cryptographic material that allows them to double the sessions without leaving any traceon the original device. When they get control of the device, they start asking for money from their contacts.

The first cases occurred in Italy last May, with 359 cases in the CSC, 211 in Bizkaia, 83 in Gipuzkoa and 65 in Álava.

Cases have also been reported in Navarre, where the Foral Police received their first complaint on 5 August and detected ten cases during the first month. In the same vein, in September, the National Police stated that it had detected a significant increase in the Foral community.

Updating the system and application

IOS is the operating system used by Apple's tech producer's iPhone, which has had one security vulnerability and another WhatsApp instant messaging app.

To correct the security gap, you need to update your operating system and messaging app, specifically to IOS 16.7.12 and WhatsApp 2.25.21.78 .

Recommendations of the Ertzaintza

While the Cyber Security Coordination Commission is investigating, the Ertzaintza has issued six recommendations to the public:

• Updatethe IOS version (a step before iPhone users update Whatsapp).
• Update the Whatsapp version.
• If the account is in danger, notifycontacts by another means, store evidence and report it to the Ertzaintza, delete and reinstall WhatsApp in order to regain control of the account (as long as the IOS version is updated).
• Activate the two-step check .
• Close WhatsApp sessionson unknown associated devices.
• If the request is received by chat, do not respond to the messageby calling the user directly or otherwise.