Hi guys, I realised that my whatsapp account has been logged out from my phone this morning and I feel rather strange.

The next moment when I log in back, everybody was asking me whetehr I am okay? But from my Whatsapp, I never send anything.

My friends and family told me that I have sent them a virus-link/website to them during midnight.

The link is something like

SEMAK STATUS BANTUAN EWALLET MADANI 2025 SEKARANG!!

xxxxxxx-log1.com/info1

I am very caution with online scam, using iPhone and never install any suspicious apps or click into any scammer-link before. It just happened so suddenly when I fall asleep last night. Unfortunately I forgot to add 2-FA into my Whatsapp account.

Anybody can advise how the hacker able to take control of my device?

Ah yes the hack and msg your contacts

It’s popular. You may have downloaded an apk or some form of infested file so they could take over your acc

Recently got one article about WhatsApp vulnerability - auto download files.

Do turn it off.

Didn’t read in detail, probably doesn’t affect iPhone. But good to turn it off anyway.

Also check your archive chats

get back your wa. then remove all connected devices. people may have hacked you using shared gadgets like laptop or computer

did you download something recently?

U are referring to this. https://www.lowyat.net/2025/348781/public-w...ng-in-whatsapp/

Have you logged in before your Whatsapp other than your iPhone? Example you logged into your PC via apps, or PC via whatsapp Web, maybe somehow they just controlled your whatsapp via PC?

check this

if got login attempt, change your pw and 2FA now

This... why?

Eventually that happened to my wife and we discovered it in the morning.

She said she did tried to log into the semakan bantuan of whatever and eventually gave away her OTP for telegram account.

I helped her to log out from all locations already but I still wonder how they able to take control of her Whatsapp in middle of night since she last online at around midnight 12am+.



Thanks, would do so. you're really helpful

Thanks for your reminder, will do so!

The hacker gained control of the Telegram account. But I wonder how they able to accesss to Whatsapp through Telegram?

My wife said she gave away the telegram OTP when she do the semakan bantuan

Oh yes! Exactly!

My wife gave away the Telegram OTP and gained access to the Telegram account.

But how they gain control of Whatsapp since Whatsapp should always need OTP from SMS or CALL

Her device is not logged into any other device but she gave away the Telegram OTP and hacker ained access to the Telegram account through phising site.

she gave away the Telegram OTP and gained access to the Telegram account through phising site.

But how they gain control of the WA?

Eventually it's not my device, it's my wife one.

She gave away the Telegram OTP and hacker gained access to the Telegram account through phising site.

If I were to guess:

The request for Telegram OTP is actually not for Telegram - but for Whatsapp, and gave away Whatsapp OTP instead

Try check whether that OTP received is actually for Telegram or Whatsapp?

This is what I am most afraid of, knowingly or unknowingly got something installed that cause security problem.

iPhone are supposed to be very secure but I think their main security relies on control of what apps you can install onto your phone.

Among Android, Samsung is probably the most secure but they work different via Secure Folder. I using Samsung primarily because of this feature. It is basically a sandbox with both hardware and software protection. Being a sandbox, it is "cut" off from other part of the unfortunately infected phone.

So good idea to find any other Android phone with such feature.

If you wife can fell into that kind of trap, I won't be surprised if she actually forgot/confused/mistaken the whatsapp OTP as telegram. Even worse, she may have given out more OTP than you know.

This post has been edited by poweredbydiscuz: Apr 23 2025, 11:58 AM

dont click or answer unknown URL / calls .. activate 2FA

Thanks for your detailed breakdown.

I can confirmed from the OTP sent to her phone is on telegram.

But after a day, there are two more verification code sent to her telegram. But those two I not sure is verify for what services as it just written down verification code.

She lost her WhatsApp account during we were sleeping. Because last online was about 1.30am and she found out the WhatsApp has been logged out at about 5.30am when wake up.


I never know for such feature like sandbox from Samsung. Really good to know, thanks for your sharing.

Do you know any feature that can enhance security on iPhone ecosystem?

She gave out OTP at 4.30am Tuesday and hacker gain control of her account for about 48 hours. But she only lost her WhatsApp today 3am.

I did see she received verification code twice on telegram. But not sure the verification code is for what

Is it possible they hack through call?

Because usually I just pick up any calls as we’re working and sometime new client would call up for potential deal.

I use Truecaller Premium so .. have no problem identifying potential SCAM related calls

i bet your waifu would probably did install some sort of apps or accepted some malicious link where it can intercept your SMS.

sometimes, it's best to just not believing in what your counterpart says.

my wife doesn't even know what she did until i start investigate myself, once kantoi'ed something, she just shrug it off with 'oh, how i know lah i not supposed to do this and that'.

No. I have never used iphone.

From what I can gather, for security, both iphone and Samsung are the best using different method. But at the end of the day, it is still up to the user.

Uhmmm what is ur wife doing at 4.30AM ?

Btw im confused now is yours or ur wife whatsapp got hacked?

And also wtf are u so concerned how they hacked it? It should be OTP or SMS. I dont recall whatsapp will do calling like Gmail/Google.

How scammers gain access and hack your WhatsApp account

1. Social Engineering - WhatsApp number hack
2. WhatsApp Forward Call
3. WhatsApp Web hacking
4. WhatsApp Spyware
5. WhatsApp Dark Web attacks


Real story: ‘I was a victim of the WhatsApp hack’

Faustin received a mysterious call over WhatsApp from a number he did not recognize. He searched for the number online and found the dialing code was from Sweden. When the unknown number called again, Faustin answered, and they hung up. Whenever he called back, no one answered. He realized something was wrong when he discovered that some of his phone files were missing.
How to know if your WhatsApp has been hacked

Several signs indicate someone has hacked your WhatsApp. Be cautious if you notice:

1. Unfamiliar devices logged in to your account. Here's how to see all the devices remotely accessing your account: open WhatsApp on your phone, click on the three dots on the top right, and select Linked Devices. You can then log out of any suspicious devices by tapping on them.

2. Strange and suspicious activity. Be wary of strange and suspicious activity, such as receiving unsolicited verification codes, strange messages from unknown contacts, or being told by one of your contacts that they received messages you didn't send. Other signs of suspicious activity include strange noises when making calls, calls from unknown numbers, and so on.

3. Poor phone performance. If you notice your phone is slower, crashes, freezes or your battery drains much faster than usual, this could mean that hidden applications are running in the background.

You can check which apps are running through Background App Refresh by going to Settings, selecting General, and clicking on Background App Refresh. From there, you can switch off any suspicious apps.
How to make your WhatsApp more secure:

1. Enable 2FA. Two-factor authentication (2FA) is a must for WhatsApp. To enable it, open the WhatsApp app on your iPhone or Android device. Navigate to Settings > Account > Two-Step Verification, and tap Enable.

2. Watch out for scams and phishing attempts. Be cautious about voice calls, messages, links, or files received on WhatsApp, especially if they come from unknown sources. Only interact with them after making sure they are ok.

3. Add Bitdefender Scamio to your WhatsApp list. This tool can help you detect potential scams by analyzing requests, situations, links, texts, or images you receive in your chat. Scamio uses advanced AI technology to determine whether the content is safe.

To add Scamio as a contact in your WhatsApp list, scan the QR code below:


https://www.bitdefender.com/en-us/blog/hotf...rotect-yourself

RM0 Akun WhatsApp Anda sedang didaftarkan di perangkat baru

Jangan bagikan kode dengan siapa pun
Kode WhatsApp Anda:Xxx

Suddnly got request when i am sleeping

My aunt got similar case like WhatsApp got hacked.

My aunt order thing, saw advertisement from FB.
Then seller ask to download some sort of apps.
Then bank got hacked in then scammer use WhatsApp to send to each contact.

Received message :
Are you free now?
...
My online banking got problem now.
Transfer to my account.
I pay back later
...
Gave account number is actually her bank actually got hacked already.
Scammer gain access the WhatsApp.
...
Imagine you communicate with others scammer reading your conversation.

This post has been edited by FusionXY: Apr 27 2025, 01:25 AM

+1(330)400-3418 received call from this number when i sleep lucky did t answer

happened to a colleague of mine.

apparently he got a call and was ask to click a message etc.

but according to him there was nothing in the message. suspect it could be a link which text is the same color as the back ground. anyway he said he did not click anything,

next thing you know all the contact got a message saying he is in trouble ask to transfer money to an account. i nearly did because it sounded urgent and the amount was not big.

anyway according to my friend it all originated from india

Your story got flaws. First your Whatsapp, then your wife's. If your story I can give it some weight, but if your wife's, then sorry, cannot be trusted. People lie, maybe not intentionally, but they just don't know what is important to tell in the story. See post 19 above https://forum.lowyat.net/index.php?showtopi...ost&p=111536085

Someone in my taman WhatsApp group also kena.

He say he click on the link then his Whatsapp kena hacked which resulted in him posting a fishing link below to the group.

Said it's the same link but dunno true or not, maybe mistaken. Bcos the link is just fishing for TG OTP. I dunno how his Whatsapp kena hacked. Dun wan to offer any more details. Maybe something embarrassing.


website is still functioning. it's ok to click in to have a look. dun worry.

This post has been edited by soonwai: Apr 30 2025, 01:35 AM

my social circle got 2 kena already within a week

Ya 2 family members n some friends kena lately

eh. u use secure folder as sandbox?

I keep all my sensitive stuff inside the folder.

many kena via the MyKasih link

bewarned

nothing is free

I put all banking apps inside the sandbox Secure Folder.

Kelantan deputy MB asks public to be careful after his WhatsApp account ...
1 day ago KOTA BARU: Kelantan Deputy Menteri Besar Datuk Dr Mohamed Fadzli Hassan has asked the public to be vigilant after his WhatsApp account was hacked by unknown individuals.

Scammers hack Kelantan MB's WhatsApp
Feb 20, 2025 The WhatsApp account of Kelantan Menteri Besar Nassuruddin Daud has been hacked by scammers attempting to solicit money. This was confirmed by the Kelantan State Government Information Secretariat ...

Akaun WhatsApp Menteri Dalam Negeri Saifuddin Nasution digodam




Kuala Lumpur: Akaun WhatsApp milik Menteri Dalam Negeri, Datuk Seri Saifuddin Nasution digodam pihak tidak bertanggungjawab hari ini.

Pejabat Menteri Dalam Negeri dalam kenyataan memaklumkan perkara serius ini sudah dilaporkan kepada pihak berkuasa untuk tindakan yang selanjutnya.

"Sehubungan itu, kami ingin mengingatkan orang ramai supaya tidak terpedaya dengan panggilan ataupun mesej yang mengakui diri dan menyamar sebagai Datuk Seri Saifuddin Nasution, terutamanya jika ada perkara yang membabitkan kewangan atau janji temu untuk berjumpa.

"Kami amat kesal dengan tindakan penggodam yang tidak bertanggungjawab ini dan berharap supaya masyarakat tidak mudah terpedaya dengan penipuan sebegini," katanya.

Kenyataan itu turut mengingatkan orang ramai supaya lebih peka dengan sindiket penipuan melalui pelbagai aplikasi media sosial dan turut melaporkan tindakan penggodam kepada pihak berkuasa.


https://www.hmetro.com.my/utama/2025/05/122...asution-digodam

so his real phone number leaked? If that's the case that's serious security breach, inb4 it's just spoofing.

Try to stay away from all those e-wallet nonsense. Even now the gomen is pushing e-wallets and sending out all the "bantuan" (more like bribing) which can only receive through signing up for their e-wallets.