Portugal’s Defense Minister Nuno Melo’s phone was targeted in a cyberattack that allowed others to use his number and send WhatsApp messages while posing as him. One message reportedly asked its recipient to transfer money, according to the account of the incident provided by Melo and reported by Pplware.
The attack took place during an official visit to Athens, Greece. It came to light after a press aide traveling with the minister received a suspicious message. Melo said the attackers had diverted communications and duplicated contacts before sending messages in his name.
The minister said the issue was linked to vulnerabilities in a phone that could no longer install software updates. The problem was addressed by replacing the device. The phone’s manufacturer and model, along with technical details explaining how the intrusion occurred, have not been made public.
Cidadãos pela Cibersegurança (CpC), a cybersecurity initiative, says the reported effects could reflect different types of compromise, from unauthorized access to the WhatsApp account to access to the phone’s operating system. It is asking the government to clarify whether the device was personal or state-provided, how the attack was carried out and how long the attackers had access.
The group has also called for an independent forensic examination to establish whether sensitive or classified information was accessed and whether national cybersecurity authorities and intelligence services were notified. Its recommendations include using state-provided and managed devices for government communications, replacing phones that no longer receive security updates, and using secure channels for official matters. CpC has also called for an independent audit of ministerial offices’ devices and communication practices.
Sources: Pplware.