Cybercriminals use WhatsApp image to steal Rs 2 lakh

Cybersecurity experts revealed that hackers used Least Significant Bit (LSB) steganography to embed malicious code in an image’s tiniest data segments, activating silently upon download and evading detection by traditional antivirus software

In a chilling reminder of how far cybercriminals will go, a Hyderabad resident fell victim to a highly advanced digital scam involving a malicious image sent via WhatsApp. The fraudsters used a technique called steganography to embed harmful code within a picture, ultimately leading to a loss of ₹2.01 lakh.

The victim, 28-year-old Pradeep Jain, received repeated calls from an unknown number followed by a WhatsApp message containing a photograph of an elderly man. The message simply read, “Do you know this person?” After ignoring the initial calls, Jain downloaded the image out of curiosity. Moments later, a large sum was withdrawn from his Canara Bank account through an ATM in Hyderabad.

The attackers reportedly used a voice-cloning tool to mimic Jain’s voice during a verification call from the bank, further complicating the fraud detection process.

Steganography used to bypass security

Cybersecurity specialists revealed that the image file was manipulated using Least Significant Bit (LSB) steganography, a method that hides malicious code in the tiniest segments of digital media files. When the file is opened or saved, the concealed payload activates silently, often slipping past traditional antivirus software.

“Steganography isn’t new, but it’s being used more creatively now,” said a digital forensics expert. “These attacks are difficult to trace without deep forensic analysis and AI-driven detection tools.”

The use of steganography in cybercrime has been recorded as early as 2017, particularly through media-sharing apps. Though previous exploits were patched, hackers continue to refine their methods.

Authorities are investigating the case, and cybersecurity professionals are urging the public to avoid downloading unsolicited media files, especially from unknown contacts. Experts stress that as scams evolve, so must awareness and digital hygiene.