Context: The Indian Cyber Crime Coordination Centre (I4C) has issued an advisory warning of a sophisticated WhatsApp ‘Boss Scam’ targeting corporates, finance professionals, and business executives.
About WhatsApp ‘Boss Scam’:
What It Is?
- The WhatsApp ‘Boss Scam’ is a sophisticated CEO impersonation cyber fraud in which attackers compromise or imitate the WhatsApp accounts of senior executives to deceive finance teams into transferring money to fraudulent accounts.
- It combines malware-based account hijacking, social engineering, and identity impersonation, making it one of the fastest-growing business cyber threats.
How It Works?
- Victims receive malicious .zip files disguised as account statements or regulatory notices (e.g., RBI, MCA, Income Tax) through WhatsApp, email, or SMS.
- Opening the file on a Windows system installs malware that hijacks the user’s active WhatsApp Web session.
- Attackers gain control of the account and send urgent payment instructions while posing as senior executives.
- The malware also forwards the malicious file to the victim’s contacts, enabling rapid spread across organizations.
Key Features:
- CEO/Boss Impersonation: Uses compromised WhatsApp accounts to issue fake urgent payment instructions.
- Malware-Enabled Hijacking: Employs advanced malware (including DLL sideloading techniques) to seize WhatsApp Web sessions.
- Finance-Focused Targeting: Primarily targets CFOs, finance teams, company directors, and chartered accountants.
- Cross-Border Organized Networks: Operated by sophisticated international cybercriminal groups using advanced attack infrastructure.
Significance:
- Highlights the need for stronger cyber hygiene as businesses increasingly rely on digital communication.
- Reinforces verification protocols and employee training to prevent financial fraud.
- Demonstrates collaboration between I4C, CERT-In, Microsoft Defender, and cybersecurity firms to detect and block emerging threats.
Relevance in UPSC Exam Syllabus:
GS Paper III:
Science & Technology:
- Cyber Security
- Cybercrime and Digital Threats
- Critical Information Infrastructure Protection
Internal Security:
- Challenges to Internal Security through Cyber Threats
- Role of I4C and national cyber resilience
