KUALA LUMPUR — WhatsApp users are being urged to exercise caution when downloading files or purchasing secondhand phones, as cybercriminals may exploit these actions to steal personal data and monitor activity, according to technology analyst Eizuwwan Eizuddin.
Eizuwwan highlighted that downloading APK files or clicking on links from untrusted sources can result in the installation of malware capable of capturing sensitive information, including passwords. “Once such software is installed, users may be unaware that their actions are being tracked,” he said.
The analyst also warned against buying used mobile devices from unknown sellers, especially those priced significantly below market value, as they might contain pre-installed spyware. He noted that Android phones, which range from budget to high-end models with varying security features, might be more vulnerable to such attacks.
To mitigate these risks, Eizuwwan recommended purchasing mobile phones approved by the Malaysian standard certification body, Sirim, as an additional safeguard against compromised devices. He further advised enabling WhatsApp’s two-step verification feature, which implements multiple layers of security, and using biometric authentication methods such as facial recognition for stronger protection compared to traditional passwords.
In response to rising concerns, the Malaysian Communications and Multimedia Commission (MCMC) announced it is investigating reports of WhatsApp accounts being hacked, blocked, or rendered inaccessible. The commission has reached out to Meta, WhatsApp’s parent company, seeking clarification and appropriate measures to address the complaints.
According to the MCMC, account compromise and account blocking are distinct issues. A compromised account involves unauthorized access by malicious actors who may use it for scams or spam, violating WhatsApp’s terms of service. In contrast, account blocking refers to an account being disabled by the platform itself, often due to breaches of usage policies.
The commission’s intervention underscores growing attention to the security of digital communication platforms amid increasing incidents of cyberattacks targeting users through mobile applications like WhatsApp.