Recently, there has been an increase in reports of corporate WhatsApp numbers of some large companies in Azerbaijan being hijacked by cybercriminals. Criminals gain control of the official numbers used by companies for customer communication through various methods, and then demand money through blackmail.
The editorial office reports that law enforcement agencies have already received complaints regarding such incidents, and investigations are underway. This is classified as direct cybercrime and fraud, carrying serious legal responsibility.
How does the criminal scheme work?
- Hijacking: Cybercriminals gain access to the device or number linked to the company's WhatsApp account through social engineering, phishing (fake links), or malicious software. Sometimes, this happens by deceiving the employee assigned to the number.
- Blocking and Blackmail: Upon hijacking the account, criminals immediately restrict access for existing administrators. They then contact company management or responsible individuals, demanding money in exchange for returning the number and all associated correspondence (including customer data).
- Threats: If their demands are not met, criminals threaten to disseminate confidential information and customer correspondence, send fake messages in the company's name, or completely delete the number. This can severely damage companies' reputation and finances.
This is a serious crime!
According to the Criminal Code of the Republic of Azerbaijan, unauthorized access to computer data, its destruction, alteration, or seizure, as well as extortion (blackmail), are considered serious criminal offenses, and those who commit these acts face long-term imprisonment.
Recommendations for Companies:
- Activate Two-Step Verification: This is the most crucial step for the security of your WhatsApp account. Be sure to set a 6-digit PIN code to prevent unknown individuals from activating your number on another device.
- Educate Responsible Employees: Regularly train employees responsible for corporate numbers about phishing attacks, suspicious links, and verification codes from unknown sources.
- Monitor WhatsApp Web sessions: Regularly check which computers your account is active on and log out from unknown devices.
- Be Wary of Suspicious Messages: Approach messages claiming to be from WhatsApp but looking strange or demanding an urgent code with suspicion.
What to do if attacked?
- Immediately Contact Law Enforcement: The moment you face such an incident, inform the Main Department for Combating Cybercrime of the Ministry of Internal Affairs (MIA) or the State Security Service (SSS).
- Do Not Make Any Payments to Criminals: Paying money does not guarantee a solution to the problem and further encourages criminals.
- Gather All Evidence: Record screenshots of blackmail messages, the criminals' numbers, and other details, and submit them to the investigation.
- Contact WhatsApp Support Service: Inform WhatsApp's official support service (support@whatsapp.com) via email that your account has been stolen.
Remember that digital security should become a priority for every company and individual, and any instance of cybercrime must be combated within the framework of the law and in an organized manner.