Alert! WhatsApp image scam steals OTPs, leaving bank accounts empty - know how to save yourself from the scam

Internet frauds have become more clever nowadays. Impersonation calls, phishing websites, and spoofed apps have all been in the limelight. But cybercrooks now started employing a new trick that takes advantage of something as innocent as an image file. A recent case was reported in Jabalpur, Madhya Pradesh, where a man lost Rs 2 lakh after he had downloaded an image received via WhatsApp from an unknown number. This is a fresh online scam with nasty malware installed on image files.



What is the new WhatsApp image scam


The latest scam traps victims through images with malware buried inside, commonly sent through message platforms such as WhatsApp. Hackers apply steganography tactics, enabling them to embed the malicious code into an image file. When one downloads or accesses the image, the malware automatically launches in silence and installs onto the victim's device.


On installation, malware can initiate a series of vicious activities such as:

• Stealing sensitive data: The malware can steal bank information, such as bank login credentials, One-Time Passwords (OTPs), and passwords.

• Remote access: In other instances, it can even offer remote access to the compromised machine to fraudsters to access sensitive data and money accounts.

• Phish calling: The phish calls can be directly made by some spammers to the victim in order to facilitate the opening of the malicious file and succeed in the attack.

Tips to save from yourself WhatsApp image scam


To avoid becoming a victim of this scam, observe the following precautions:

• Do not open files from random numbers

You should never download or even open up any files or photos from people you do not know. As a precaution, require the sender to confirm first before you open.

• Turn off auto-download on WhatsApp

Turn off WhatsApp's auto-download mode in order to prevent unwanted files or images from auto-downloading in your phone.

• Update your device regularly

It is important to maintain your phone up to date. Ensure you get the most current security patches and software, as these updates typically include patches for known flaws.

• Use reliable antivirus software

Install reliable antivirus software to scan and repel malware, making your device safe from possible harm.

• Avoid suspicious calls or messages

If you are being called or messaged to open an image or recognize a person in an image, don't bother. These are the tactics employed by the scammers to try and get you to open harmful files.

• Spread awareness

Inform your friends and family about the scam so they can be careful and not fall victim. The more informed people are, the less victims.
Since scams are constantly changing, the demand to pay attention and stay in touch with the new tactics employed by cybercriminals is still on.




Jabalpur WhatsApp image scam : Man loses Rs 2 lakh after downloading malicious photo


For the Jabalpur case of Madhya Pradesh, the victim had received an apparently innocuous image from an unknown number via WhatsApp.
Thinking that it was a normal image, he had downloaded it. In a matter of minutes, he started noticing suspicious activity in his banking transactions. Before he could react, Rs 2 lakh were withdrawn from his account. Experts believe that the image had malware that hijacked his money information and caused the loss.





Also Read | Want to create Ghibli-style images for free? Check your daily limit with ChatGPT and Grok