KUALA LUMPUR: A seemingly harmless download from an unknown link or a secondhand phone could leave WhatsApp users exposed to hackers and enable them to monitor their activity, steal sensitive information and even hijack their bank accounts, says tech analyst and influencer Eizuwan Eizuddin.
He said one common way users could expose themselves to hackers is by clicking on links and downloading APK files from unknown or untrusted sources, which could install bugs or malicious software capable of recording their activities including the entry of sensitive information such as passwords.
“People need to be careful about what they download and where they get it from. Once such software gets into the phone, users may not even realise their activities are being monitored,” he said.
He also cautioned against buying used mobile phones from unknown sources, especially devices being sold far below market prices, as there is a risk of them having pre-installed spyware without the buyer’s knowledge.
“There is a reason why some used cellphones are sold below market rates,” he said, adding that Android phones could be more vulnerable to hacking as they are manufactured across a wide range of price points, from budget to high-end models, with security features varying between devices.
Eizuwan also advised the public to purchase Sirim-approved mobile phones to reduce the possible risk of devices being compromised by hackers.
He said users should also activate WhatsApp’s two-step verification feature, which he described as a good security measure as it provides multiple levels of protection.
Eizuwan added that passkeys using facial recognition and other biometric authentication are more difficult to compromise compared with passwords that could potentially be stolen by hackers.
The Malaysian Communications and Multimedia Commission (MCMC) said yesterday that it is investigating public complaints involving WhatsApp accounts that had reportedly been hacked, blocked or become inaccessible.
MCMC said it has referred the relevant cases to Meta for clarification and appropriate action.
It said account compromise and account blocking are two distinct matters.
The former is when an account is hacked, taken over by unscrupulous parties and misused for scams, spam or activities that violate WhatsApp’s terms of service, while the latter is the result of an account being blocked by the platform.
