Tech

How hackers use WhatsApp to spread scams and fake news

Published

5 years ago

August 15, 2018

Edited by Fundisiwe Maseko

Check Point researchers have discovered a vulnerability in WhatsApp that allows a threat actor to intercept and manipulate messages sent by those in a group or private conversation. By doing so, attackers can put themselves in a position of immense power to not only steer potential evidence in their favour, but also create and spread misinformation.

The vulnerability so far allows for three possible attacks:

1. Changing a reply from someone to put words into their mouth that they did not say.
2. Quoting a message in a reply to a group conversation to make it appear as if it came from a person who is not even part of the group.
3. Sending a message to a member of a group that pretends to be a group message but is in fact only sent to this member. However, the member’s response will be sent to the entire group.

Make It Go Viral

As of early 2018, the Facebook-owned messaging application currently has over 1.5 billion users with over one billion groups and 65 billion messages sent every day. According to a report by global digital agencies, mobile users accounted for 172 million, most of whom used only two Facebook-owned platforms: WhatsApp and Messenger.

In addition, WhatsApp also has plans to roll out additional functionalities for businesses to help them do commerce and manage customer support through the app. Vulnerabilities such as the ones described above make the potential opportunities for scamming rife.

WhatsApp with the Fake News?

Due to its very nature of being an easy and quick way to communicate, WhatsApp has already been at the center of a variety of scams. From fake supermarket and airline giveaways to election tampering, threat actors never tire of ways to manipulate unsuspecting users.

In fact, the ability to social engineer on a mass scale was already seen at a level where even people’s lives were at stake. In Brazil, rumors quickly spread on WhatsApp about the dangers of receiving a yellow fever vaccine – the very thing that could have stopped an epidemic of the deadly virus during its 2016 rampage that infected 1500 people and killed almost 500.

More recently, last month vicious rumors, also spread via WhatsApp, led to a spate of lynching and murders of innocent victims in India.

WhatsApp is also taking an increasingly central role in elections, especially in developing countries. Earlier this year, again in India, WhatsApp was used to send messages, some of which were completely false.

Ultimately, social engineering is all about tricking the user and manipulating them to carry out actions they will later regret. With an ability to manipulate replies, invent quotes or send private messages pretending to be group ones, as seen in this research, scammers would have a far greater chance of success and have yet another weapon in their arsenal.

What’s more, the larger the WhatsApp group, where a flurry of messages are often sent, the less likely a member would have the time or inclination to double check every message to verify its authenticity, and could easily be taken in by the information they see. As already seen by spam emails that fake the sender’s name to appear to be from a source the receiver trusts, this latest vulnerability would allow for similar methods to be used though from a totally different attack vector.

How to Protect Yourself from Misinformation

While there are no security products that can yet protect users from these types of deceptions, there are several ideas to keep in mind to avoid being a victim of fake news, conspiracy theories and online scams in general.

If something sounds too good to be true, it usually is. And likewise, if something sounds too ridiculous to be true, it probably is.

Misinformation spreads faster than the truth. Although you may be seeing the same news from multiple sources, this does not make it more factual than were it to come from a single source.

Check your ‘facts’. It is recommended to cross check what you see on social media with a quick online search to see what others may be saying about the same story. Or even better, do not get more of your news from social media websites at all.

Click to comment

Tech

US collaborates with AfDB to accelerate Africa’s digital transformation

Published

16 hours ago

November 28, 2023

Akanimoh Etim

The United States Commercial Service has announced a strategic collaboration with the African Development Bank (AfDB) to drive a massive digital transformation across Africa.

The partnership, which was unveiled on the sidelines of the Africa Tech Festival in Cape Town, South Africa, will open the door to a series of dialogues on how U.S. digital innovation can support development goals across Africa.

Senior U.S. Commercial Liaison to the African Development Bank, Ashley Ndir, who announced the collaboration, said further discussions would focus on key themes such as embracing new technologies, improving internet access, enhancing skills, and creating a regulatory environment conducive to innovation.

“Both parties will explore how African governments can collaborate with American technology firms to grow their economies and how U.S. businesses can tap into new opportunities in Africa’s emerging markets.

“We are at a turning point in Africa’s technological advancement. By bridging insights from the U.S. private sector with Africa’s vibrant markets, we aim to drive innovation and economic growth. This partnership is a testament to that mission”, Nadir said.

“Africa has made significant investments in pivotal infrastructure and policy enhancements to create an innovative digital economy,” Head of ICT Operations at the AfDB, Nicholas Williams, also enthused.

“As Africa’s premier development finance institution, the African Development Bank will help push Africa’s digital boundaries even further by forging strategic relations, building on historical investments and, more importantly, tapping into the energy of our young population, who are digital natives. We value the insights that the U.S. private sector may bring”, he added.

Tech

5,300 African entrepreneurs graduate from Google’s Hustle Academy

Published

2 days ago

November 27, 2023

Akanimoh Etim

The Google’s Hustle Academy which was launched in 2022 to empower budding African entrepreneurs has graduated 5,300 small and medium-sized businesses (SMBs) from across countries like Nigeria, South Africa and Kenya.

The Google Hustle Academy, since coming on board, has empowered over 10,000 entrepreneurs across Africa, with more than 3,000 of the SMBs coming from Kenya, according to Google Country Director for East Africa, Agnes Gathaiya.

At the graduation ceremony on Monday in Nairobi, Gathaiya noted that the Hustle Academy programme focused on addressing the challenges faced by African SMBs and provided practical skills and resources essential for business growth.

“In the Academy, business owners undergo five days of hands-on training and receive 3,000 hours of training on fundamental aspects of business to help them navigate the challenges faced by SMEs in Africa,” she said.

“The training curriculum includes strategic growth sessions including business growth strategy, building digital marketing roadmaps, discovering and evaluating funding routes and how to pitch for success among other topics.

“This year’s cohort builds upon the foundation of the more than 5,000 SMBs who graduated last year. The graduates represent a wide range of industries, demonstrating the diverse and dynamic nature of African entrepreneurship.

“These businesses, through their participation in the Hustle Academy, have shown a remarkable capacity for innovation and resilience. The determination and growth exhibited by these SMBs are commendable,” Gathaiya added.

“The Hustle Academy program stands as a beacon of what practical training and resource provision can accomplish. Today’s graduation is not only a celebration of their hard work but also an acknowledgment of their role in enriching the African business environment.

“Through a variety of programs, products, and partnerships, small and medium-sized businesses (SMBs) in Africa are receiving substantial support, helping them navigate the challenges of the modern business world. Programs like the Hustle Academy are part of Google’s broader commitment to bolster the African business sector” she further revealed.