{"id":17542,"date":"2015-06-01T13:30:44","date_gmt":"2015-06-01T19:30:44","guid":{"rendered":"https://www.webroot.com/blog/?p=17542"},"modified":"2023-10-10T07:19:26","modified_gmt":"2023-10-10T13:19:26","slug":"whatsapp-spam-emails-making-a-comeback","status":"publish","type":"post","link":"https://www.webroot.com/blog/2015\/06\/01\/whatsapp-spam-emails-making-a-comeback\/","title":{"rendered":"WhatsApp Spam Emails Making a Comeback"},"content":{"rendered":"

In 2013 we shared a series of\u00a0blog posts\u00a0about several WhatsApp scams making the rounds redirecting people to pharmaceutical sites and malware.<\/p>\n

In recent weeks we have seen that these scams have made a comeback and are evading modern spam filters.<\/p>\n

Sample Spam Email:<\/strong><\/p>\n

\"whatsapp\"<\/a><\/p>\n

Using the email above as an example, by pressing the ‘Play’ button on a Desktop or Mobile browser the user is taken to a site masquerading as an article from the BBC titled:<\/p>\n

SPECIAL REPORT: We expose how to lose 23 lbs of Belly Fat in 1 Month With This Diet Cleanse That Celebrities Use<\/strong><\/p>\n

\"whatsapp2\"<\/a><\/p>\n

Instead of taking the user directly to the scam site, they try to dupe the would-be victim into thinking that the deal is legitimate by impersonating the above article. All other links lead to the real BBC site, however attempting to leave the page will also launch a pop-up window to the fake shop which can be confused for a legitimate advertisement.<\/p>\n

Pop-up window loads when leaving the site:<\/strong><\/p>\n

\"whatsapp3\"<\/a><\/p>\n

If the user chooses to learn more about the ‘celebrity cleanse’ they are then taken to a site where they are prompted to enter personal information including personal email, postal address, and phone number.<\/p>\n

Sample screenshot of the landing scam page:<\/strong><\/p>\n

\"whatsapp4\"<\/a><\/p>\n

Remember, always buy from a legitimate, trusted site. If something seems too good to be true, it usually is.<\/p>\n","protected":false},"excerpt":{"rendered":"

In 2013 we shared a series of\u00a0blog posts\u00a0about several WhatsApp scams making the rounds redirecting people to pharmaceutical sites and malware. In recent weeks we have seen that these scams have made a comeback and are evading modern spam filters. Sample Spam Email: Using the email above as an example, by pressing the ‘Play’ button […]<\/p>\n","protected":false},"author":65,"featured_media":17543,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3005],"tags":[],"yst_prominent_words":[5567,5569,5571,3493,3721,3919,3695,5575,5563,3875,5573,5565,4371,3675,4611,4187],"acf":[],"_links":{"self":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/17542"}],"collection":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/users\/65"}],"replies":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/comments?post=17542"}],"version-history":[{"count":4,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/17542\/revisions"}],"predecessor-version":[{"id":32313,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/17542\/revisions\/32313"}],"wp:featuredmedia":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/media\/17543"}],"wp:attachment":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/media?parent=17542"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/categories?post=17542"},{"taxonomy":"post_tag","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/tags?post=17542"},{"taxonomy":"yst_prominent_words","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/yst_prominent_words?post=17542"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}