WhatsApp security concerns in Kosovo: KOS-CERT begins handling cases, issues recommendations

Reports in recent days of compromised WhatsApp accounts have prompted a reaction from KOS-CERT, which has said it is now handling the reported cases.

The National Cyber Security Unit has said it is cooperating with the responsible state institutions, mobile operators and international partners, and is in contact with Meta to analyse the cases and identify the mechanisms used to compromise accounts.

Until the analyses are complete, KOS-CERT has called on citizens to exercise heightened caution and take several security measures.

Citizens are advised not to share their WhatsApp verification code (OTP) with anyone, to enable two-step verification and to check the devices linked to their account.

If an unknown or unauthorized device appears in the “Linked Devices” list, KOS-CERT recommends disconnecting it immediately.

Citizens are also advised not to click on suspicious links received via SMS, email, WhatsApp or other platforms, especially when asked to verify their account or provide personal data.

KOS-CERT has also warned about attempts to register accounts on other devices. If a user receives a code or notification about a registration attempt they did not initiate, they must not share the code or authorize the request.

The National Cyber Security Unit has recommended protecting the email address linked to the account as well, using a unique password and multi-factor authentication (MFA) where available.

KOS-CERT has stressed that citizens must not share passwords, verification codes or personal data, even when the request appears to come from a known contact, as that person’s account may also be compromised.

If a citizen suspects their account has been compromised, KOS-CERT recommends using only WhatsApp’s official mechanisms and channels to recover the account, and reporting the incident to KOS-CERT.

KOS-CERT has said it will continue monitoring and analysing the situation in cooperation with institutions, operators and relevant partners, and the public will be informed of important developments through official channels, as Telegrafi reports.