'Boss Scam' alert: Cybercriminals hijack executives' WhatsApp accounts to trick staff into transferring money

The Indian Cyber Crime Coordination Centre (I4C) on Monday issued an advisory warning about an emerging cyber fraud dubbed the "Boss Scam" or CEO impersonation scam, in which cybercriminals target senior executives and high-ranking officials to orchestrate fraudulent financial transfers.

According to I4C, the fraudsters send malicious archive files via email or WhatsApp, disguising them as urgent regulatory compliance documents. The files are designed to appear legitimate and prompt immediate action from the recipients.

Once the archive is opened and the malware is executed, the attackers gain access to the executive's Windows device and active Web WhatsApp sessions. The compromise allows cybercriminals to impersonate the executive and communicate directly with subordinate employees.


Using the hijacked accounts, fraudsters then instruct employees to make urgent financial transfers or carry out other transactions, leveraging the authority and trust associated with senior leadership positions.

I4C said the scam represents a growing trend in cybercrime that exploits both malware and social engineering techniques to deceive employees and bypass traditional verification mechanisms.

The cybercrime coordination centre has asked organisations and executives to exercise caution when receiving unsolicited files, particularly those claiming to involve urgent compliance requirements, and to verify any financial instructions received through messaging platforms before acting on them.