I4C Issues Warning on Sophisticated WhatsApp 'Boss Scam' Threat
Science & Security · Saturday, 8 August 2026
The Indian Cyber Crime Coordination Centre (I4C) issued an urgent advisory warning corporates and finance professionals against the 'Boss Scam'. Attackers deploy malware via malicious zip files to hijack active WhatsApp Web sessions and impersonate senior executives to execute fraudulent fund transfers.
Quick highlights
- I4C warning highlights malware-based CEO impersonation on WhatsApp.
- Uses malicious .zip files disguised as official communications (RBI, MCA, IT) to execute DLL sideloading.
- Hijacks active WhatsApp Web sessions to issue unauthorized payment demands to finance teams.
- Automatically forwards malicious payloads across corporate contact lists.
- I4C, CERT-In, and Microsoft Defender working to block threat infrastructure.
Context
The Indian Cyber Crime Coordination Centre (I4C) under MHA alerted business entities about malicious WhatsApp Web session hijacking schemes targeting CFOs and directors.
Key Facts
Combines social engineering with malware downloads. Victims receive fake regulatory notices via WhatsApp/email containing hidden executables that compromise active desktop sessions.
Significance
Demonstrates the evolution of cybercrime from simple phishing to advanced DLL sideloading and corporate identity theft.
Challenges / Way Forward
Enforcing mandatory multi-factor authentication, two-step verification for financial approvals, and continuous employee cyber hygiene training.
Exam Angle
Relevant for GS Paper III (Internal Security - Cybercrime, Cyber Hygiene, Role of I4C).
Remember this
- I4C functions under the Ministry of Home Affairs (MHA).
- The 'Boss Scam' targets corporate finance teams through CEO impersonation.
- Exploits DLL sideloading malware embedded in .zip files.
- CERT-In is India's national nodal agency for responding to computer security incidents.
More from Saturday, 8 August 2026
- National Handloom Day 2026: Strategy for Tech-Driven Artisan Modernization
- NUCFDC Opens New Mumbai Office and Launches Cyber Security Operations Centre
- The Mecca Joint Deterrence Agreement: Gulf Defense Framework
- Conservation Surge for Critically Endangered Slender-Billed Vultures
- Strategic Forces Command Conducts Successful Agni-IV Launch
- Arunachal Pradesh: Geographical Significance and Strategic Infrastructure Expansion
- The Quit India Movement (August Kranti): History, Resolution, and Impact