Tanyaradzwa Chigumbu

The Zimbabwean government has launched an investigation into a series of cyberattacks targeting WhatsApp Business and other Meta accounts. The Ministry of Information and Communication Technology, Postal and Courier Services confirmed on Tuesday that it is working alongside local mobile network operators (MNOs) and law enforcement agencies to address these incidents.

ICT Minister Hon. Tatenda Mavetera stated that the ministry is collaborating closely with the impacted mobile network operator, while the Zimbabwe Republic Police (ZRP) Cybercrime Division is also investigating the matter.

“The scale of the reported attacks is unprecedented and requires a coordinated response to protect our citizens and businesses,” said Mavetera.

Investigators are examining all relevant leads, including the possible involvement of SMS termination partners, commonly referred to as aggregators, as well as the systems of the affected platforms. The investigation aims to identify those responsible for the reported breaches.

Additionally, the ministry is engaging with Meta, the parent company of WhatsApp, Facebook, and Instagram, as their involvement is crucial for investigating activities on their platforms and for supporting account protection and recovery.

A key concern raised by the minister is that criminals may be targeting compromised accounts linked to Meta’s advertising services and associated payment systems. Investigators are working to determine if any financial information has been exposed or if unauthorized transactions have occurred.

The affected mobile network operator is expected to issue a comprehensive statement outlining its findings and response measures.
Mavetera noted that the operator has assured the government that it is implementing a mechanism to provide assistance to affected citizens around the clock.

“The government’s immediate priority is to contain further harm, support affected users, and establish the facts. Verified information will be communicated to the public as it becomes available,” Mavetera added.

The Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) is also involved in addressing the situation, amidst concerns that personal data and other sensitive information could potentially be misused.

Investigators are working to determine whether the reported incidents have resulted in financial losses or exposed sensitive information. “This remains an ongoing line of inquiry, and evidence must be established to determine responsibility,” Mavetera said.

‘She urged individuals and businesses to review their account access, linked devices, advertising activity, and payment transactions as the investigations continue.

“We strongly encourage our citizens and businesses to review their account access, linked devices, advertising activity, and payment transactions. They should not share their passwords, PINs, or verification codes. At the same time, they need to independently verify any requests for money,” she emphasized.

Mavetera also advised anyone noticing suspicious activity to contact their banks to ensure that questionable transactions are not approved without verification. She urged affected users to follow the official account recovery procedures provided by the platforms.

The public and affected businesses are encouraged to report any suspected criminal activity through the appropriate channels, including the ZRP and the relevant mobile network operator, to facilitate a timely response.

“We want to caution our citizens to use trusted channels when reporting criminal activity, including the police and responsible MNOs, to expedite their response,” Mavetera said. ‘

She welcomed the affected operator’s commitment to establishing a 24/7 response mechanism for concerned citizens. “As a government, our immediate priority is to contain further harm.

We need to support affected users and establish the facts. Engagement with Meta has already begun, and we anticipate a statement from the affected MNO.

The government is very concerned about this matter and will communicate any verified information that becomes available,” she concluded.