The Syrian Telecommunications Authority has issued an urgent warning about a growing cyber threat targeting users of unofficial WhatsApp applications and vulnerable Microsoft Windows systems.
According to Jihad Alala, Director of the Information Security Center at the National Authority for Information Technology, a wave of recent reports from users across Syria has prompted the ministry to speak out about the dangers of using modified versions of WhatsApp, such as GB WhatsApp and KB WhatsApp Plus.
These unofficial apps, which are not approved by WhatsApp’s parent company Meta, contain serious security vulnerabilities that could allow hackers to access users’ personal and financial data.
Authorities warn that these versions may also carry malicious software capable of infecting devices, stealing sensitive information, and leaving them exposed to repeated cyberattacks.
The ministry urged the public to download only the official version of WhatsApp from trusted platforms like Google Play or the Apple App Store.
In addition, users are encouraged to activate two-step verification and regularly check app permissions. Cybersecurity officials emphasized the importance of not sharing one-time verification codes with others, as doing so could open the door to unauthorized access.
Alala also highlighted growing concerns over the security of Microsoft Windows systems. Malicious files are being used to infiltrate devices running Windows 10, Windows 11, and Windows Server, posing a risk to both individuals and organizations.
These files can steal login credentials and gain access to sensitive information stored within private networks. The alert comes shortly after Microsoft confirmed a new vulnerability, listed as CVE-2025-29809, which impacts the system’s Credential Guard feature. If exploited, it could allow attackers to capture usernames and passwords and use them to access other systems within an organization.
The ministry is advising users to update their Windows systems regularly and avoid clicking on suspicious files or links. They also recommend contacting cybersecurity teams immediately if any unusual activity is detected.
According to Alala, the increasing number of similar incidents suggests that Syria is facing a serious and growing cyber threat.
The ministry considered it necessary to issue this high-level warning to prevent further damage. The warning underscores the importance of digital vigilance and responsible app usage as cybersecurity challenges continue to evolve worldwide.