.png){kind=logo}
It starts with a simple ping, an image from an unknown number, and this might resemble someone familiar. The message might read as something mundane, and curiosity leads the person to tap it. Within seconds, malware hidden inside the image activates in the background.
The malware intercepts OTPs, bypasses passwords, and opens the doors to bank accounts. The scam completes itself before the victim realizes something is wrong.
This isn’t a tale of caution. It’s reality. A WhatsApp scam is quietly sweeping India, draining accounts and leaving people stunned.
Through a practice called steganography, cybercriminals are slipping malware into seemingly harmless WhatsApp images. These images appear benign and won’t trigger warnings. But once downloaded, the malware installs silently, extracting bank logins, OTPs, saved passwords, and even taking full control of the device.
In Jabalpur, Madhya Pradesh, one person lost Rs 2 lakh after opening such an image sent by an unknown number. It appeared harmless, but unfortunately, it wasn’t.
This scam doesn’t use suspicious links or fake login pages. The image itself is the weapon. Messages like “Is this your photo?” or “Do you know this person?” are crafted to spark curiosity. One click is all it takes.
Intercept OTPs in real-time
Access banking apps and initiate unauthorized transactions
Send data to remote servers
Enable remote device control
Install additional spyware
Unknown senders should be ignored. Don’t open files from unknown numbers.
Disable the automatic download feature for photos, videos, and documents in WhatsApp settings. Always review before tapping.
Security patches in updates can close known vulnerabilities.
Install mobile security apps that scan media files for hidden threats.
Messages designed to provoke fear or curiosity are often part of a scam.
Family members and the elderly should be made aware of such scams. Sharing this knowledge helps prevent more victims.
A Jabalpur resident lost Rs 2 lakhs to this scam. However, beyond money, the emotional stress, time spent on formalities, and shaken confidence in technology are equally damaging.
An image is no longer just an image; it can be a trap in disguise. Stay alert and avoid impulsive clicks. One moment of caution can prevent a long trail of regret. Anyone affected should visit cybercrime.gov.in to report the incident.
