New WhatsApp OTP Scam Allows Scammers to Hijack Your Account

The new WhatsApp scam is currently targeting users in India.

On May 23rd, 2022, the founder and CEO of CloudSEK, a contextual AI firm, Rahul Sasi, shared details of a new WhatsApp scam where threat actors try to hijack users’ accounts through phone calls.

The scam is somewhat unconventional as the victim receives a call from the attacker, who convinces them to make a call at a number starting either with 405 or 67. After the call, the victim is logged out of their WhatsApp account, and hackers hijack them, gaining complete control of the accounts. Here’s how Sasi explained the entire attack scenario on Twitter.

“First, you receive a call from the attacker who will convince you to make a call to the following number **67*<10 digit number> or *405*<10 digit number>. Within a few minutes, your WhatsApp would be logged out, and the attackers would get complete control of your account.”

How does the WhatsApp hack work?

According to Sasi, the number used for the fraudulent call is a service request for Airtel and Reliance Jio for Call Forwarding when a number is engaged. The scammer forwards the victim’s call to a number they own and quickly starts the

Read More: