Your phone can be hacked by just opening a WhatsApp photo: All you need to know

WhatsApp

Online scams are getting trickier by the day, and now cybercriminals have found a new way to target people — through images on WhatsApp. This latest scam isn’t about clicking suspicious links or sharing your OTP. Instead, it hides dangerous malware inside seemingly harmless photos.

What is the scam all about?

The scam works by sending an image to your WhatsApp, usually from an unknown number. On the surface, it looks like an ordinary picture. But hidden inside is malware designed to steal your banking details, passwords, OTPs, UPI information, and even control your phone without you realizing it.

This is done using a technique called steganography, where data is secretly tucked inside images. The most common type is called Least Significant Bit (LSB) steganography, which hides malware in the tiniest parts of the image file. The moment you open that image, your phone can get compromised — and unlike other scams, you won’t even receive an OTP warning.

In Madhya Pradesh’s Jabalpur, a man recently lost around Rs 2 lakh this way. He received a WhatsApp message from an unknown number asking for help to identify someone in a photo. After multiple calls from the same number, he finally clicked on the image. That’s when his phone was hacked, and his bank details were stolen, leading to money being withdrawn from his account.

This scam is harder to spot because it doesn’t ask you to click a shady link or enter details anywhere. Just opening an image is enough for the malware to get to work, silently accessing your apps, private data, and even your phone itself.

How you can stay safe

–Never download images, videos, or click links from unknown numbers.
–Turn off auto-download for media in your WhatsApp settings.
–Use caller ID apps like Truecaller.
–Keep your phone’s software and antivirus updated.
–Block and report suspicious numbers.
—Warn friends and family, especially people who are less tech-savvy.
If you suspect you’ve been scammed, immediately report it to cybercrime.gov.in.