- The Civil Guard warns of a wave of cyber scams on WhatsApp that exploit vulnerabilities in iPhones.
- The attackers gain access to the account without the victim needing to click on links or share codes.
- Cases have been reported in La Rioja and Granada, with losses of up to 2.000 euros.
- They recommend updating the operating system and enabling two-step verification.
Cybercriminals have found a new way to infiltrate WhatsApp accounts without leaving a trace. In recent weeks, law enforcement agencies have detected a surge in attacks exploiting security flaws in certain iPhone models, allowing scammers to impersonate victims and solicit money from their contacts. The most worrying aspect is that users don't have to do anything to be targeted : no clicking on a link, providing a code, or scanning a QR code.
The Civil Guard, through its cybercrime units, has confirmed several cases in Spain, primarily in La Rioja and Granada. In one case, a person lost €2.000 after attackers impersonated them in a real conversation. The victim didn't even realize their account had been compromised until a friend asked why they were being asked for money.
This is how the 'zero-click' attack works
This type of fraud is known as 'zero-click' because it requires no interaction from the victim . Criminals exploit vulnerabilities in the iOS operating system, especially in older versions, to access WhatsApp accounts stealthily. The intrusion is so silent that it doesn't even appear in the 'Linked Devices' section, making it extremely difficult to detect.
Once inside, the attackers review recent conversations and choose a trusted contact. They then send an urgent message requesting a money transfer, sometimes even including a bank account number that belongs to a foreign institution. Because the message comes from the recipient's usual number and is within a legitimate chat, they don't suspect anything.
Where have the cases been detected?
Authorities have confirmed four cases in La Rioja , in towns such as Calahorra, Haro, and Logroño, and more than five reports in Granada in just two weeks. In all cases, the victims were using iPhones with outdated versions of iOS, primarily models between the iPhone 8 and iPhone 12. The Civil Guard indicates that the attackers are exploiting known vulnerabilities that have already been patched in recent updates.
One of the victims explained that no sent messages appeared on their phone, but their friend could see them. This is because the attacker manipulates message synchronization at the cryptographic level, causing the legitimate and fraudulent sessions to vie for control. As a result, the victim receives no notifications and only becomes aware of the situation when their contacts ask about the money requests.
Recommendations to protect yourself
In light of this threat, experts emphasize the importance of keeping iPhones updated to the latest version of iOS . Older versions have known vulnerabilities that cybercriminals exploit. They also recommend enabling two-step verification on WhatsApp, regularly checking linked devices, and closing any unrecognized sessions.
Furthermore, it's crucial to be wary of any money requests received via WhatsApp, even if they appear to be from a known contact. The best course of action is to call the person to confirm they are genuinely asking for help. It's also advisable to back up your conversations and never share SMS or verification codes with anyone to avoid becoming a victim of scams.
The wave of attacks has put authorities on alert, who do not rule out the possibility of more victims in other provinces. The good news is that, by following a few simple security guidelines, it is possible to minimize the risk of falling into this trap. The key is to always keep your operating system updated, activate all the protection measures offered by WhatsApp, and, above all, verify any unexpected requests for money through another channel, knowing which WhatsApp scams are the most common.
