Communications minister's WhatsApp hack – The possible scenarios

Hanno Labuschagne

Journalist
Staff member
Joined
Sep 2, 2019
Messages
4,146
Communications minister's WhatsApp hack – The possible scenarios

The Department of Communications and Digital Technologies announced yesterday that Minister Stella Ndabeni-Abrahams’s WhatsApp account had been hacked.

The department said the hack had resulted in private and confidential information being exposed.

While the department inferred that the Minister’s WhatsApp account had been compromised, it is not clear how attackers purportedly gained access to the Minister’s WhatsApp messages.
 

acidrain

Executive Member
Joined
Jan 7, 2007
Messages
5,982
Gaining access to WhatsApp web is, possibly, a likely scenario depending on how many machines she has loaded. A notification would only be sent if a new device is scanned but any devices (work computer / home computer) that is currently authorized, just requires you to navigate the url and you are in. That is if you don't have 2FA which clearly she probably doesn't.

My opinion is she leaked information she wasn't allowed to, got caught, and now the department is trying to get ahead of it before it blows up.
 

JimM

Expert Member
Joined
May 23, 2006
Messages
1,543
Publish what you like and cry "hacked" seems to be the case!
 

Napalm2880

Expert Member
Joined
Mar 8, 2007
Messages
2,931
Far more likely is:
Option 6: The oxgen thief has made an outrageous claim that is difficult to prove as an excuse for some bugger up that was made.
 

Illegal Allien

Senior Member
Joined
Apr 5, 2018
Messages
514
In my experience "hacked" is always a PR ploy for a stupid comment thats come back to bute the owners backside
 

Mike Hoxbig

Honorary Master
Joined
Apr 25, 2010
Messages
43,382
When politicians scream "hack", they should be made to prove how they were "hacked".
He outlined the following alternative scenarios in which an attacker could have gained access to the Minister’s WhatsApp account, ordered from most to least likely:
  1. Physically copying some messages from the device, or other backups, for example on a laptop or external hard drive.
  2. SIM-swap fraud. This would be noticed.
  3. Access to WhatsApp Web, most easily achieved through short-term access to her device. This could also be noticed as WhatsApp notifies you of other sessions.
  4. Access to her cloud backups, e.g. social engineering her iCloud password.
  5. Malware on her device either through a hack of her iPhone or short-term physical access. This would be a more sophisticated hack requiring private iOS exploits.
Most of these would imply negligence on her part and she should account for it...
 

Danie_V

Senior Member
Joined
Apr 15, 2010
Messages
561
In Cyber Security month too and with all the promoting of 4IR the last thing the public need to hear is about a simple comms platform being accessed.... Not sure why SA has not done what French and German Govs have done to ditch Whatsapp for more secure Element messenger which we could self-host in SA, and have proper verification of accounts for secure messaging.
 

Gordon_R

Honorary Master
Joined
Jul 5, 2009
Messages
20,835
Seems she has a lot of other things to worry about:
 
Top