Cyber alert: Fraudsters use WhatsApp web to impersonate CEOs, dupe firms of crores in Hyderabad
Sajjanar said that fraudsters are gaining entry into corporate networks by sending phishing links to official email IDs
By Newsmeter Network
Representational Image
Hyderabad: Commissioner of Police VC Sajjanar on Saturday warned that cybercriminals are targeting CEOs, CFOs and finance staff of companies through a new WhatsApp impersonation fraud, using hacked systems and WhatsApp Web sessions to trick employees into transferring large sums of money.
Phishing emails used to breach systems
In a press statement, the Commissioner said fraudsters are gaining entry into corporate networks by sending phishing links to official email IDs. Once clicked, these links install malware that allows attackers to take complete remote control of the system.
This access enables them to monitor internal communications, access sensitive information and operate systems without the knowledge of employees.
Misuse of WhatsApp web sessions
After compromising systems, cybercriminals focus on active WhatsApp Web sessions. Using these, they impersonate senior executives such as CEOs or CFOs and send messages to accountants or finance teams.
The messages typically cite urgency, stating that the official is in a meeting and unable to take calls, while instructing immediate transfer of funds to specified accounts.
Social engineering drives the fraud
Police said the scam relies heavily on social engineering tactics. Since the messages are sent from genuine WhatsApp accounts of top executives, employees tend to trust them and act without verification.
Several such incidents have recently been reported within the Hyderabad Commissionerate limits.
Advisory issued to companies
The Hyderabad Police urged organisations to remain vigilant and follow basic precautions:
Do not act on financial requests received via WhatsApp without verification
Always confirm such instructions through a direct phone call or alternate channel
Install and regularly update firewalls and antivirus software
Log out of WhatsApp Web after every use
Immediate reporting crucial
Victims of cyber fraud should immediately contact the national helpline 1930 and report the incident without delay.
Complaints can also be filed on the official portal cybercrime.gov.in.
Call for greater cyber awareness
Emphasising the need for awareness, the Commissioner said strict adherence to cybersecurity practices and timely verification of financial instructions are key to preventing such frauds. He urged companies and employees to stay alert and avoid falling prey to cybercriminals.
