Maharashtra Man Loses Over ₹2 Lakh in WhatsApp Image Scam Using Steganography
WhatsApp Image Scam: Maharashtra Man Loses ₹2 Lakh in Sophisticated Steganography Attack
A 28-year-old man from Maharashtra was recently duped of over ₹2 lakh in a WhatsApp scam involving a highly sophisticated hacking method called steganography. The victim, Pradeep Jain, unknowingly downloaded an image that triggered malicious code hidden within, ultimately compromising his bank account.
This incident shines a spotlight on a growing cybersecurity threat that doesn’t rely on phishing links or deceptive login pages, but instead leverages media files — the kind we routinely download every day.
The WhatsApp Trap: How the Scam Unfolded
The scam began with a seemingly innocuous call and WhatsApp message from an unknown number. Jain, who initially ignored the message, received persistent calls until he finally opened the image sent to him. The image, appearing to be of an elderly man, was accompanied by a message asking, “Do you know this person?”
At 1:35 PM on the same day, Jain downloaded the image. Within minutes, ₹2.01 lakh was withdrawn from his Canara Bank account via an ATM located in Hyderabad—hundreds of kilometers away from his location.
What stunned even the bank was the scammers’ ability to mimic Jain’s voice during a verification call, adding another layer of sophistication to the attack.
The Science Behind the Hack: What Is Steganography?
Cybersecurity experts later identified the technique used in the attack as Least Significant Bit (LSB) steganography—a method that conceals malicious code within ordinary-looking files like images, videos, audio clips, and PDFs.
“Steganography alters the tiniest bits of data in media files to carry malicious instructions,” explained Neehar Pathare, MD of cybersecurity firm 63SATS.
Unlike traditional malware, which may trigger security alerts, this method bypasses antivirus systems, making it particularly insidious. The code is activated only when the infected file is opened, executing harmful instructions without raising red flags.
How It Works: Malware Hidden in Media Files
According to Tushar Sharma, cyber expert and co-founder of TOFEE, image files contain data stored across different channels—red, green, blue, and even an alpha channel for transparency. Hackers embed malware in these channels so subtly that the image appears completely normal to the human eye and basic security tools.
Once the user opens the image, the malware gets installed silently, potentially granting hackers access to:
- Banking credentials
- OTPs and messages
- Stored passwords
- Device control
Common file types used in such attacks include
- .jpg
- .png
- .mp3
- .mp4
These files are frequently shared over WhatsApp and other messaging platforms, increasing their effectiveness as delivery vehicles for malware.