Security Stop Press : WhatsApp Group Chat Scam Warning

Warnings have been issued about a new audio call scam on WhatsApp targeting family and friends. The scam involves a fraudster, most likely using a fake profile picture and display name, making an unexpected call, impersonating a member of a WhatsApp group chat. The fraudster tells the victim they’re sending them a one-time passcode (OTP) to join a for group members and asks the victim to share the passcode with them in order to be registered for the call.

However, this is in fact an access code that will allow the scammer to register the victim’s WhatsApp to a new device, take over their account, and enable two-step verification so the victim is essentially locked out of their own WhatsApp account. The fraudster then messages people in the victim’s contacts asking for money.

Hundreds of complaints to Action Fraud have already been reported and the advice for those in large group chats on WhatsApp, is to be on their guard and monitor who joins the chats.

An Apple Byte : iPhone Users Targeted With Password Reset Scam

It’s been reported that some iPhone users have recently been targeted with an MFA bombing / multi-factor fatigue phishing attack.

The attack (which uses a bug in Apple’s password reset feature) bombards the user’s phone with password reset requests and ‘Allow’ or ‘Disallow’ options. If the user eventually clicks on ‘Allow’ in an attempt to stop the many prompts, they receive a call from scammers pretending to be Apple Support, asking the user to verify a one-time code in an attempt to gain access to the account and/or to sensitive user information.

So far, it’s understood that these attacks have been highly targeted at certain individuals and users should note that Apple Support will never call a user unless that user has specifically asked them to. It’s also been reported that turning on Apple Recovery Key for the account is a way to stop the multiple notifications generated by the scammers.

Security Stop Press : Snapchat Photo Scam Targeting Teen Boys

Police and the US Charity National Center for Missing and Exploited Children have warned of a nude photo Snapchat scam targeting teen boys that could cause emotional trauma.

The Snapchat ‘online sextortion’ scam involves scammers befriending teenage boys online by posing as teenage girls, sharing nude photos of a girl with them, and asking for nude photos in return. Those teen boys who reciprocate are then sent a demand for money with the threat of sharing the boy’s photos with his social media followers if he doesn’t pay (via a peer-to-peer payment app). However, even if the scammers are paid, they don’t go away.

The advice to young victims of a sextortion scheme is first tell their parents, to block bad actors, and to report any instances of this crime to police and Action Fraud.

In September, Snapchat announced new safety features in its app to enhance protections and safeguards for teenage users, which include educational resources highlighting risks, and in-app warnings when a teenager receives a friend request from someone with whom they have no mutual contacts.