Pakistan’s National Cyber Emergency Response Team has issued a high-level security alert warning government institutions, officials and individuals handling sensitive information about targeted cyberattacks conducted through WhatsApp Web, WhatsApp Desktop and email.
The advisory classifies the threat level as high, highlighting the risk of unauthorised access to government systems, theft of confidential information and compromised digital communications.
According to the alert, cybercriminals are impersonating government officials and institutions to distribute malicious files and deceptive messages designed to trick recipients into opening harmful attachments or links.
Attackers are reportedly disguising malicious content as official documents, using phishing techniques and malware to target computers running Microsoft’s Windows operating system.
The advisory warns that opening such files could compromise a computer’s security, potentially allowing attackers to gain remote access to the affected device.
Once a system has been infiltrated, cybercriminals may be able to steal confidential documents, passwords and other sensitive data, while also taking control of active communication sessions.
The National Cyber Emergency Response Team has particularly highlighted the danger of WhatsApp session hijacking, through which attackers could gain unauthorised access to an individual’s account and use their identity to deceive colleagues, contacts or other potential targets.
Officials warned that suspicious messages received unexpectedly from familiar contacts should not automatically be considered trustworthy, as the sender’s account may already have been compromised.
The appearance of unfamiliar devices or sessions in WhatsApp’s linked devices section was also identified as a possible indication of unauthorised access.
In response to the threat, the advisory recommends that government officials and personnel handling sensitive information immediately discontinue the use of WhatsApp Web and the WhatsApp Desktop application on Windows computers.
Users have also been instructed to review their active WhatsApp sessions and promptly log out of any unfamiliar or suspicious linked devices.
The cybersecurity agency has urged individuals to avoid opening unverified links, attachments or messages, particularly those claiming to contain official correspondence or sensitive documents.
It further emphasised that passwords, one-time passwords and account verification codes must never be shared with others.
The advisory also proposed a complete prohibition on transferring files received through WhatsApp to official Windows computers, aiming to reduce the risk of malware entering government networks.
Cybersecurity specialists have advised users to ensure that Windows operating systems, web browsers and other applications remain updated with the latest security patches.
Enabling two-step verification was also recommended as an additional safeguard against unauthorised account access.
In cases where a device is suspected of being compromised, users have been directed to disconnect it immediately from the internet and any connected networks to limit the possibility of further intrusion.
The advisory also stresses the importance of preserving suspicious messages, relevant security logs and other digital evidence rather than deleting them.
Affected individuals and departments have been instructed to notify their designated cybersecurity teams so that appropriate technical assessments and legal investigations can be initiated.
The warning underscores the growing risks associated with targeted cyberattacks that exploit trusted communication platforms and impersonate legitimate officials to gain access to sensitive information.