Cybersecurity alert over WhatsApp scam impersonating Health Ministry

Scammers use fake Covid vaccine appointments to steal account access and perform financial fraud via Bizum.

Generic image of a mobile phone receiving a text message with a verification code.
IA

Generic image of a mobile phone receiving a text message with a verification code.

The Catalan Cybersecurity Agency has issued a warning this February regarding a phishing campaign targeting WhatsApp users under the guise of covid-19 vaccinations.

Criminals call victims claiming to be from the Ministry of Health, using leaked personal data to appear legitimate. They trick users into sharing a verification code sent via SMS, which allows them to hijack the account.
Once the account is compromised, scammers message the victim's contacts asking for urgent money transfers through Bizum. Officials remind the public that health authorities never request security codes over the phone.