![\"Silhouettes](\"https:\/\/www.geo.tv\/assets\/uploads\/updates\/2026-10-26\/688328_2999983_updates.jpg\")
- \n
- NCERT urges users to avoid opening suspicious files.<\/b><\/li>\n
- Malicious files could enable remote access, password theft.<\/b><\/li>\n
- Cyber agency urges users to terminate suspicious sessions.<\/b><\/li>\n<\/ul>\n
\nISLAMABAD: The National Cyber Emergency Response Team (NCERT) has issued a high-alert advisory, warning of targeted phishing and malware attacks through WhatsApp Web, WhatsApp Desktop and email, cautioning that malicious files could compromise Windows systems and expose sensitive information.<\/p>\n
In the advisory, the cyber agency said attackers are impersonating government officials and departments to send malicious files disguised as official documents, potentially compromising Windows systems.<\/p>\n
The notification warns that infected systems could allow attackers to gain remote access, steal passwords and extract sensitive data.<\/p>\n
It also cautions that hackers could hijack WhatsApp Web sessions and impersonate users through their own phone numbers, raising the risk of fraudulent messages being sent to their contacts.<\/p>\n
The advisory identifies unexpected messages or files received from familiar numbers as possible signs of targeted attacks. Unknown devices appearing in WhatsApp\u2019s linked devices list may also indicate unauthorised access.<\/p>\n
The cyber agency has advised officials handling sensitive information to avoid using WhatsApp Web and Desktop on Windows systems. Users have also been urged to immediately terminate suspicious WhatsApp Web sessions and independently verify unexpected messages before opening links or files.<\/p>\n
The advisory warns users against sharing passwords, one-time passwords (OTPs) or verification codes with anyone. It also recommends against transferring WhatsApp files to official Windows computers.<\/p>\n
Users have been directed to keep Windows, browsers and other software updated and enable two-factor authentication and WhatsApp\u2019s two-step verification feature.<\/p>\n
In case of suspected compromise, users should immediately disconnect the affected device from the internet and other networks, preserve relevant messages and system logs as evidence, and avoid reopening suspicious files, the advisory added.<\/p>\n<\/p><\/div>\n
- Malicious files could enable remote access, password theft.<\/b><\/li>\n