Key Points
- NCERT urges users to avoid opening suspicious files.
- Malicious files could enable remote access, password theft.
- Cyber agency urges users to terminate suspicious sessions.
ISLAMABAD: Pakistan’s National Cyber Emergency Response Team (NCERT) has issued a high-alert advisory warning of targeted phishing and malware attacks through WhatsApp Web, WhatsApp Desktop and email, cautioning that malicious files could compromise Windows systems and expose sensitive information.
According to the advisory, cybercriminals are impersonating government officials and departments to distribute malicious files disguised as official documents. Opening these files could allow attackers to gain remote access to affected systems, steal passwords and extract sensitive data.
The advisory also warns that hackers could hijack WhatsApp Web sessions and impersonate users, potentially enabling them to send fraudulent messages to contacts from compromised accounts.
CYBERSECURITY ALERT | PAKISTAN
Pakistan’s National CERT has warned of high-risk phishing and malware attacks targeting government officials through WhatsApp Web, Desktop and email.Attackers reportedly impersonate officials and share malicious files to steal credentials, hijack sessions and access sensitive data.
Stay vigilant. #CyberSecurity #Pakistan #cybersecuritynews #NCCIA
— Cyber Security News (@CyberSecNews663) October 26, 2026
NCERT has identified unexpected messages or files received from familiar phone numbers as potential indicators of targeted cyberattacks. The appearance of unknown devices in WhatsApp’s linked devices list could also signal unauthorised access.
The cyber agency has advised officials handling sensitive information to avoid using WhatsApp Web and WhatsApp Desktop on Windows systems.
Users have also been urged to terminate suspicious WhatsApp Web sessions immediately and independently verify unexpected messages before opening links or attachments.
The advisory cautions users against sharing passwords, one-time passwords (OTPs) or verification codes with anyone. It also recommends avoiding the transfer of WhatsApp files to official Windows computers.
To strengthen digital security, NCERT has advised users to keep Windows, web browsers and other software updated and enable two-factor authentication, along with WhatsApp’s two-step verification feature.
In the event of a suspected cyberattack, users should immediately disconnect the affected device from the internet and other networks, preserve relevant messages and system logs as evidence, and avoid reopening suspicious files, the advisory adds.
