• Source:JND
Add as a preferred

A new and dangerous WhatsApp scam is making the rounds, and it only takes one image to put your entire bank account at risk. Cybercriminals are reportedly sending seemingly harmless photos via WhatsApp that, once opened, can trigger malicious software capable of stealing your banking credentials and personal data. This alarming scam highlights the increasing sophistication of digital threats, where even a single tap on an image can lead to financial disaster. Experts are warning users to avoid opening images or files from unknown contacts and to keep their devices updated with the latest security patches. If you value your money and privacy, now is the time to stay vigilant. Here’s everything you need to know to stay safe from this growing threat.

New Scam Alert

A victim of this fraud is 28-year-old Pradeep Jain, who received a voice note containing a suspicious image, which he promptly decided to download. With this one image, he was later deprived of an unnecessary expenditure of Rs 2.01 lakh. The scam utilises the Least Significant Bit (LSB) steganography, a method of concealing malware in plain sight, which makes it untraceable by standard security systems.

The scammers were able to imitate his voice and withdraw money from an ATM in Hyderabad. Jain’s impersonators were able to fool Jain’s Bank with the scammer’s voice.

What Cyber Experts Have To Say

As reported by the Indian Express, Tushar Sharma, cyber expert and co-founder at TOFEE (The Organisation For Enlightenment and Education), quoted, “This isn’t a new concept. In 2017, hackers would share GIF files on WhatsApp which contained malicious executable code. Once downloaded, the hidden code would execute in the background and infiltrate the security measures and seize the user’s data. Even though security was tightened, this method tried making a comeback in 2019 with far more advanced techniques and larger scopes.”

Steganography Scams vs Traditional Malware Attacks

This is an art of spying that highlights the malicious data hidden under the non-suspicious pictures or music files shared by cybercriminals to compromise security. Steganography marks a significant concern for cyber security since these files are heavily circulated and appear to be ordinary making suspected files difficult to identify.

How Does The Attack Function?

How is it possible that harmful software can be and hid in images? Basically, every image is made up of three pictures in colors form of Red, Green and Blue , with each component requiring three bytes of information, total of nine bytes of information, the malware can be installed in the alpha channel or one of the color channels. The malware is executed in these three byte channels and waits for incoming instructions. When the infected picture is accessed, the malware surreptitiously bundles itself and gains access to sensitive materials. Even worse, the malware may be able to bypass av antivirus protection because of specialized tools made for the capturing and executing of the harmful programs, maleware. Sophisticated weapons of viruses have advanced so much that they can hide and make videos images part fool the human eye.

Is It Possible To Detect The Malware?

The concealment of pictures requires the use of forensically inspired tools knew by analysing spatial and behavioural Patare explains the scenarios pop up that do exist and adjust to the execution patterns ”.Through tools scanner is useless because there is no content scanning for the base document. A shot should be considered in scanning ‘inconsistencies. AI will also have imaging provide the environment because within these targets space anomalies If elements of incorporeal structure contradict. deep learning sounds futuristic. files scan by AI can reach boundaries files and empower early capturing targets threats hidden early signs.

What Measures do You Need To Take To Avoid Such Scams?

In these details provided Shamsri on express Indian, he explains a lot of things such as ignoring users whom you don’t know photo sender will result to concealing auto save of media by Shubs. Only Open files from people whom you know on.

Avoid unknown senders: Don’t open or download files from unknown numbers.

Keep your phone updated: Regular updates help patch vulnerabilities.

Disable auto-download: Prevent unknown media from saving automatically by tweaking WhatsApp settings.

Never share OTPs: Scammers often pretend to be known contacts.

Limit group additions: Set group permissions to ‘My Contacts’ to prevent being added to suspicious groups.

Silence unknown callers: Activate the ‘Silence Unknown Callers’ feature on WhatsApp to reduce spam and scam attempts.

Conclusion

Just a heads up, even with WhatsApp's current safety stuff, scams are always changing, so everyone needs to stay sharp. If a random person messages you or adds you to a group, you'll get a pop-up with info about them or the group. Best thing to do? Block and report anything fishy, and never open pics, videos, or links from numbers you don't recognize.

Scam concerns aside, the spokesperson shared with indianexpress.com that WhatsApp is always advancing in technologies, safety tools, and resources aimed at preventing online scams.

Pathare further suggested the need to implement protective measures like behavior-based threat detection and restricting uncontrolled media access to trusted safe environments. On the organizational level, equipping the staff with knowledge on risk awareness training along with AI-driven cybersecurity systems can greatly lower susceptibility to such attacks.