A new email phishing scam targeting victims claims recipients have an “incoming voice message” on messaging app WhatsApp.
Type of Scam: Phishing Email
Attack Type: Link to Phishing Website
Social Engineering Technique: New message received.
The email – an example is below – informs the recipient that they have a new voicemail message on WhatsApp.
The WhatsApp app allows users to send “voice messages” in private chats or group chats. As such, those who use WhatsApp may be lured into thinking that the email is legitimate and that they really do have a new voicemail to listen to.
Sponsored Content. Continued below...
But it’s a phishing scam. The link in the email leads to a malicious website that attempts to trick victims into allowing the website to send browser notifications. See below.
Once the user clicks ‘Allow’, their browser will show notifications that link towards malicious downloads.
Thankfully, as with all phishing email scams, there are tell-tale signs that we urge our readers learn to identify.
Firstly, the email FROM address has nothing to do with WhatsApp. And most importantly, the link that you click leads to a website that also has nothing to do with WhatsApp.
Also, in the case of this example, WhatsApp doesn’t send you emails that contain links when you receive a new WhatsApp voicemail message. That’s because voice messages are automatically downloaded to a person’s device within the WhatsApp app itself. (I.e. to listen to the message you need to open the WhatsApp app, not click a link to a website.)
As always, to avoid these types of phishing scams, remember the simple tips above and always think twice before clicking on a link inside an email you were not expecting. Simply not clicking on links in emails will protect you from the vast majority of emails scams out there on the World Wide Web.
