WhatsApp Group Invite Attack: How to Protect Your Account

A cybersecurity expert has issued a warning about an ongoing attack targeting WhatsApp users that can result in their accounts being suspended. According to the alert issued Tuesday, attackers are exploiting WhatsApp's feature that allows users to be added to groups without their consent. The scheme involves adding victims to a group containing illegal child exploitation material, then reporting the group to WhatsApp.

The attack typically occurs during early morning hours when victims are asleep and unable to notice they've been added to a group. Attackers create a group, add their targeted victims, and upload prohibited content.

They then file a report with WhatsApp, which can trigger automatic suspension of all accounts in the group, even those belonging to users who never requested to join and never posted anything.

Your Whatsapp account has been blocked (Photo: Srugim)

Victims may wake up to find their WhatsApp accounts suspended without any prior warning that they had been added to a group or opportunity to leave before the report was filed. The method relies on involuntarily adding victims to a group as part of a strategy designed to get their accounts blocked. Rather than attempting to hijack the account directly, the attacker places it in an environment where illegal content is being distributed, then uses the platform's reporting mechanism against all group members.

How to protect yourself:

The cybersecurity expert recommends restricting who can add your account to groups.

To adjust this setting, open WhatsApp and navigate to: Settings → Privacy → Groups → My Contacts.

This change prevents people who are not in your contact list from adding you directly to a group. According to the alert, this step can significantly reduce exposure to the attack by preventing attackers from adding your account to a group without your knowledge.