Kuwait is witnessing a sharp rise in attempts to hack and steal social media accounts, particularly on WhatsApp, following a warning issued by the National Cyber Security Center about the growing sophistication of recent attacks.

Security researchers at the University of Vienna revealed a vulnerability in WhatsApp that exposed the data and phone numbers of an estimated 3.5 billion users worldwide.

Cybersecurity experts told Al-Rai that the number of victims inside and outside Kuwait continues to grow and that the vulnerability remains active.

Experts noted a significant evolution in the methods used by attackers, explaining that some victims are now hacked without any interaction, such as clicking on links or opening messages.

Hackers are said to be exploiting a technical weakness in WhatsApp that allows account takeover with no action required from the user.

Specialists stressed that the most effective line of defense remains the activation of the two-factor authentication feature, which adds a protective layer that cannot be bypassed through the current vulnerability.

Dr. Anwar Al-Harbi, head of the Electronic Media and Public Relations Committee at the Kuwait Information Technology Society, confirmed a clear rise in account-hacking attempts targeting users in Kuwait.

He attributed this increase to the widespread use of social media platforms, declining security awareness among some users, and the continuous development of attack techniques.

Al-Harbi noted that major platforms still lack intelligent detection systems capable of proactively identifying malicious links, suspicious messages, or attempted breaches, a gap that leaves millions vulnerable to increasingly sophisticated cyberattacks.

Cybersecurity expert Hussein Al-Nakkas also pointed to a surge in electronic fraud attempts in recent months, warning that hackers are exploiting both technical vulnerabilities and common user mistakes.

He emphasized that protection does not require complex measures, but rather simple, consistent practices, such as enabling two-factor authentication, avoiding unknown links, using strong and unique passwords, refraining from sharing sensitive personal information, and regularly updating devices and applications.

These steps, he said, are essential to reducing exposure to cyber threats.

Mohammed Al-Rashidi, head of the cybersecurity committee at the Electronic Media Union, described the WhatsApp vulnerability as particularly dangerous because it allows hackers to access accounts without the victim providing codes or clicking any link.

He explained that the use of artificial intelligence in discovering system vulnerabilities has made it easier for attackers to exploit weaknesses, while users’ failure to install regular updates increases their susceptibility.

Al-Rashidi stressed that the flaw is not the users’ fault and that WhatsApp is expected to introduce a fix, but until then, enabling two-factor authentication remains the only guaranteed protection.

Cybersecurity specialist Shrouq Al-Sayegh said Kuwait has seen a noticeable expansion in cyberattacks that exploit users’ trust in well-known applications.

She noted that social engineering tactics have grown more advanced, with attackers impersonating technical support or official institutions to trick victims into handing over verification codes.

She added that delays in updating devices have left many users exposed to attacks that can be carried out without any action from the victim, relying solely on outdated vulnerabilities.

Recent statistics underscore the scale of the problem. Kuwait counted 4.2 million social media users in 2024, representing about 84 percent of the population, with WhatsApp used by more than 92 percent of university students.

The Ministry of Interior’s Cybercrime Department received roughly 330,000 reports by the end of last year, and an estimated 500 cyber cases reach the judiciary each month.

Experts warn that without stronger awareness and consistent digital hygiene, the number of victims—both locally and globally—will continue to rise.