WhatsApp is the leading
messenger app in Singapore, it is the popular platform associated with one’s colleagues,
friends and family, hence, trust has been established. Scammers are looking to
abuse this trust to gain an entry point to not just one’s personal details,
conversations and photographs, but to their contacts as well.
What this shows is that
other than just malware and viruses, scammers are looking at social engineering
as another form of cyberattack.
With Singapore leading the
region with more than 100% mobile penetration, Singaporeans
have become more reliant on such digital services. As such, we also need
to be more cyber-savvy and cautious when
it comes to detecting potential threats and being proactive, rather than
reactive in protecting our data.
Here’s what you should do to avoid phishing attacks via text or
WhatsApp:
- If you have the slightest doubt about the authenticity of any text, always check. If you receive a suspicious text from a friend, message that friend on a separate messaging tool, or call them, to check. Do not reply to that text, as this informs the scammer that you’re a “warm lead”.
-
Note shortened URLs – Scammers often mask ‘fake’ sites using URL shortening services like Bitly or TinyURL. Users should be wary of such shortened links as common sites like Apple, Spotify or Netflix typically do not shorten their links as it raises user suspicion.
-
Make a habit of creating strong passwords to all social media applications and other applications on your mobile. Simple passwords can be easily cracked by seasoned hackers, and if you repeat them across applications, hacking just one application gives them access to all. Better yet, use a reliable password manager which can set and remember defyingly long and complex passwords for you
-
Enable multifactor (or two-factor) authentication for all services that provide it as an option and consider not using important services that do not offer this critical security option. Users can enable two-step verification for Whatsapp under Account > Two-step verification. This feature will require a PIN when registering your phone number with WhatsApp again.
