Malaysian Home Minister's WhatsApp Hacked; Attackers Send Messages to Contacts

Malaysian authorities have confirmed that hackers compromised the WhatsApp account of Home Minister Datuk Seri Saifuddin Nasution.

The minister's office reported that unidentified individuals hacked Saifuddin Nasution's personal WhatsApp account using a foreign VPN service. The attackers then began to send malicious links to the minister's phone contacts.

In an official statement, the minister's office described the incident as "serious" and immediately reported it to the authorities for investigation.

Common methods hackers use to take over WhatsApp accounts

Hackers typically gain control of WhatsApp accounts in several ways:

1. SIM swapping: Hackers trick mobile carriers into transferring victims' phone numbers to new SIM cards. This gives them access to SMS 2FA codes and, eventually, access to the WhatsApp account.
2. Phishing attacks: Victims receive messages containing malicious links, tricking them into revealing sensitive information or verification codes. They might even be persuaded, through phone calls or seemingly legitimate messages, to voluntarily provide the SMS verification codes.
3. Malware infections: Attackers use malware, sometimes disguised as legitimate apps, to access personal data and hijack WhatsApp accounts.

Authorities warn the public

Officials urged the public to remain cautious and avoid responding to messages or calls claiming to originate from the minister, especially if the messages involve financial transactions or personal meetings.

"We strongly advise everyone to remain alert and not to be deceived by individuals impersonating the minister through compromised accounts," the authorities have said on Facebook.

Police launch investigation

The Royal Malaysia Police's Commercial Crime Investigation Department (CCID) has opened an investigation and confirmed that no financial losses have been registered after the hack.

Acting Director of the CCID Datuk Seri Muhammed Hasbullah Ali said they are tracing the cyberattack's origin but have yet to provide any further insights.