A user’s messaging app account might be of interest not only to jealous spouses and nosy coworkers, but also to cybercriminals. Stolen WhatsApp accounts are used for various types of criminal activity, ranging from spam distribution to sophisticated scam schemes. Cybercriminals constantly look for WhatsApp accounts and use various methods to gain access to them.

There are two ways cybercriminals can gain control of a WhatsApp account: they can add another device to an existing account using the “Linked devices” feature, or they can re-register the account on their own device as if the user had bought a new phone.

“In the first case, the user continues to use WhatsApp as usual, but the criminals also have access to all recent conversations. In the second case, the user loses access to their personal account.

“When trying to log in, WhatsApp notifies him that the account is already in use on another device, and the attackers can then control the account but not the past conversations.

“Messengers are a private space, as they often contain personal information about our lives and relationships with family and friends. They can also contain information about work and, in some cases, confidential information.

“If you notice any unusual activity, such as receiving replies to messages that you didn’t send, or if your friends complain about strange messages coming from your account, it’s important to take steps to protect your privacy immediately,” comments Seifallah Jedidi, Head of Consumer Channel, META, at Kaspersky.

While you can check instruction on what to do in case a WhatsApp account was already compromised, here are the key steps on how to avoid a WhatsApp account to be hacked:

• Enable two-step verification in WhatsApp and memorise your PIN — it’s not a one-time code. To do this, go to Settings → Account → Two-step verification.
• Never, ever share your PIN or one-time registration codes with anyone. Only scammers ask for these details.
• WhatsApp recently introduced support for passkeys. If you enable this option (Settings → Account → Passkeys), logging in to your account will require biometric authentication, and instead of PIN codes, your smartphone will store a long cryptographic key. This is a very secure option, but it may not be convenient if you frequently change devices and switch between Android and iOS.
• Set up a backup email address for account recovery: Settings → Account → Email address.
• If you’ve already added an email address, log in to your email account and change your password to a strong, unique one. To store it securely, use a password manager, such as Kaspersky Password Manager.
• Enable two-factor authentication for your email account.
• Make sure you haven’t fallen victim to a SIM swap scam. Contact your mobile carrier — preferably in person — and verify that no duplicate SIM cards have recently been issued for your number. Also, make sure there’s no unauthorised call-forwarding set up on your number. Cancel any suspicious changes and ask the staff about additional security measures for your SIM card. These may include prohibiting SIM-related actions without your being present, an extra password required for authentication, or other protections. Available security measures vary significantly by country and mobile carrier.

Any security measures in WhatsApp will be of little use if your smartphone or computer is infected with malware. Therefore, be sure to install comprehensive protection like Kaspersky Premium on all your devices.

Nigerian Senate, on Tuesday, passed for first reading a bill aimed at amending the Nigerian Data Protection Act of 2023.

The amendment seeks to compel major social media platforms—including Facebook, X (formerly Twitter), Instagram, WhatsApp, YouTube, TikTok, and other independent bloggers—to establish physical offices in Nigeria.

The bill is titled “A Bill for an Act to Amend the Nigerian Data Protection Act, 2023, Mandating the Establishment of Physical Offices within the Federal Republic of Nigeria by Social Media Platforms, and for Related Matters, 2025.”

It was introduced by Senator Ned Nwoko, a lawmaker from Delta State.

The bill not only mandates that the social media platforms set up physical offices in Nigeria, but also seeks to regulate bloggers operating in the country.

It proposes that bloggers must establish verifiable offices in any Nigerian capital city, maintain proper employee records, and join a recognised association based in Abuja.

During the Senate debate, Nwoko highlighted Nigeria’s significant digital presence, referencing a report from Global Web Index shared by Business Insider Africa.

With a population of over 200 million, Nigeria ranks second globally in social media engagement.

Nwoko argued that having local offices is long overdue, noting that the absence of such offices creates challenges, including limited local representation and difficulties for users and businesses to engage directly with these platforms.

The Senate President, Godswill Akpabio, acknowledged the potential benefits of having these social media platforms establish local offices, particularly in terms of improving regulatory oversight and ensuring compliance.

However, Akpabio urged caution regarding the regulation of bloggers, stressing the importance of protecting online expression.

“It’s beneficial to have an address, but bloggers are a bit different. The best approach is for the bill to go for a second reading, followed by a public hearing to provide more clarity,” Akpabio said.

He emphasised that the intent of the bill was not to suppress social media, but rather to improve taxation and record-keeping for digital platforms in Nigeria.

The Senate has also tasked the Committee on ICT and Cyber Security to conduct a thorough review of the bill and report its findings in two months.

Google said Tuesday it will acquire cloud security platform Wiz for $32 billion, citing the need for greater cybersecurity capacity as artificial intelligence embeds itself in technology infrastructure.

The all-cash deal brings Wiz into the Google Cloud operation, boosting the capacity of consumers to use “multiple clouds” and providing “an end-to-end security platform for customers, of all types and sizes, in the AI era,” the companies said in a joint press release.

The deepening influence of AI makes “cybersecurity increasingly important in defending against emergent risks and protecting national security,” the companies said.

The transaction, the largest ever sought by Google or parent Alphabet, will test President Donald Trump’s openness to large takeovers after resistance to such deals by the administration of Joe Biden.

Alphabet had been close to a Wiz takeover last summer, but the deal fell apart due in part to regulatory concerns, according to the Wall Street Journal.

Started in 2020 by Assaf Rappaport, co-founder and CEO, and a team who sold a previous venture to Microsoft, Wiz will continue to work and provide services to platform led by other tech giants including Amazon Web Services and Microsoft Azure.

Wiz is based in New York, with offices in Tel Aviv and three other US cities.

In a webcast after the deal was announced, Rappaport said the service “continuously scans an organization’s code and cloud environments, monitoring them in real time” to “prioritize the most critical risk based on real impact and blocks active threats.”