Ida Ismail
A simple message, seemingly helping a friend:
“Hello! Please vote for Roxana Costin in this poll. She is the daughter of a friend of mine. The prize is a scholarship for free education for a year. It is very important to her.”
This text, accompanied by a link, has arrived on the WhatsApp of many Albanians. Often, it comes from people you know: friends, colleagues, even professors. This makes the scam seem credible, but in fact it is a phishing attack aimed at taking control of your data.
Sonila received such a message from her teacher. Since her daughter is a ballerina, the message seemed real to her. The link wouldn't open on her phone, so she decided to open it on her computer. It asked for a code, and as soon as she entered it, her WhatsApp was blocked.
"Suddenly dozens of messages were sent from my account. Then, it was closed and I received many calls from people who had received the messages," says Sonila.
Later, her teacher announced on social media that she was not the one who sent the message. Sonila realized that she had fallen victim to a cyber attack. Sonila's account was restored after 24 hours, after she filed a complaint with the National Cyber Security Authority.
Once you receive the message and click the link, hackers gain full access to your WhatsApp. They use your account to: Share the message with your contacts, obtain personal information, or scam others who know you.
In some cases, even the platform itself (META) may temporarily close your account for security reasons.
Phishing attacks, attempts to hack accounts
Phishing attack is an online fraud method where someone pretends to be a person or institution you know, to obtain personal information such as passwords, banking details, etc.
IT Expert: Criminal groups aiming for financial gain
According to IT Besmir Semanaj, phishing attacks are usually organized by criminal groups that divide tasks between programmers, operators, and "actors" who communicate with "victims," all for financial gain.
The reaction of the institutions
National Cyber Security Authority (AKSK) announced that it is working to recover the affected accounts, after many citizens have complained about this massive fraud. In the meantime, it advises citizens to:
Do not click on suspicious links, verify every message, even if it comes from someone you know, and report cases to the authorities.
Reaction of the State Police
State Police WhatsApp groups have also been victims of these attacks. The police appeal to citizens that if they receive such messages, they should delete them immediately and not take any action.
Recent scams
January 2025: Messages with casino offers, promising bonuses of up to $1200 with a minimum deposit.
"Sudden inheritance" email: You are notified that a very wealthy person has died and you are the heir. This is a method as old as email itself.
SMS from "Albanian Post": They invite you to click a link to receive a package, all a scam.
Attack on SPAK, March 2025: Hackers tried to access the emails of special prosecutors.
AKSK has launched the implementation of a national strategy for cybersecurity, which includes:
-Advanced technological means for protection
-Legal regulations
-Collaboration with international partners
The goal is to protect institutions, businesses and citizens from cyber attacks that are becoming increasingly frequent and sophisticated.
How to protect yourself?
1. Do not click on links that come through unusual messages.
2. Always verify with the person who supposedly sent you the message.
3. Enable two-step verification on WhatsApp and other platforms.
4. Report any fraud to the National Cyber Security Authority.
In an increasingly digital world, online security is just as important as physical security. Remember that clicking a link could cost you your digital freedom.
