I4C Issues Advisory on WhatsApp Boss Scam Targeting Businesses

#GS-3 #Science & Technology #Cyber Security #ICT #Current Events #National #I4C #Cybercrime

Why in News

The Indian Cyber Crime Coordination Centre (I4C) issued a warning about a sophisticated digital fraud called the WhatsApp Boss Scam, which specifically targets business executives, corporate firms, and finance professionals across the country.

In this cyber fraud, attackers imitate or compromise the WhatsApp accounts of senior company leaders to trick finance teams into sending money to fake bank accounts.
This threat is growing rapidly because criminals combine malware, social engineering, and identity impersonation to carry out the fraud smoothly.

Cybercriminals send harmful .zip files through WhatsApp, email, or SMS while pretending that these files are regulatory notices from agencies like the RBI, Income Tax Department, or MCA.
When a user opens this attachment on a Windows system, hidden malware installs automatically and hijacks their active WhatsApp Web session.
Once the hackers gain control of the account, they send urgent payment requests to employees while posing as top corporate leaders.
The malware also sends the dangerous file to all contacts in the account, allowing the scam to spread quickly throughout an entire organization.

CEO Impersonation: Hackers use hijacked WhatsApp accounts to issue fake and urgent payment demands.
Malware Hijacking: Attackers use advanced techniques like DLL sideloading to take complete control of WhatsApp Web sessions.
Targeting Finance Teams: The scam specifically targets key financial personnel including CFOs, directors, chartered accountants, and finance employees.
International Cyber Networks: Organised criminal groups operating from across borders carry out these attacks using advanced digital infrastructure.

This warning highlights the urgent need for better digital hygiene because modern companies depend heavily on online messaging tools.
It underlines why businesses must train their staff regularly and follow strict verification steps before making any financial transactions.
The advisory shows effective teamwork between government agencies like I4C and CERT-In, alongside private security firms like Microsoft Defender, to block cyber threats.