Scammers are employing a new tactic to deceive chat app users by sending fake voting messages, potentially leading to account hijacking. These fraudulent schemes exploit the popularity of voting contests that allow users to express preferences for sports stars or celebrities.
Kaspersky’s security experts have warned that these messages, disguised as interactive polls, actually contain links to counterfeit websites designed to steal personal information. The fake webpages simulate legitimate voting contests, displaying images of athletes with “Vote” buttons and live counters showing supposed vote counts and user participation to create a sense of legitimacy and encourage engagement.
If users fall for the scam, they may unwittingly provide scammers with their usernames and private 6-digit codes, enabling the hijacking of their accounts. Tatyana Shcherbakova, a Web Content Analyst at Kaspersky, emphasized the attackers’ exploitation of trust in harmless online activities like voting contests to trick users with convincing fake interfaces and steal sensitive data.
To safeguard against such hijacking attempts, Kaspersky recommends the following precautions:
– Enable two-step verification on WhatsApp to enhance security by requiring a PIN for account access.
– Verify the authenticity of websites before entering personal information, especially when accessed through unsolicited links.
– Never disclose verification codes, as WhatsApp does not request them from users.
– Utilize reputable security software to identify and block malicious websites and links.
By staying vigilant and adhering to these guidelines, users can protect themselves from falling victim to these deceptive tactics.