A 28-year-old man named Pradeep Jain lost ₹2.01 lakh from his bank account after simply downloading an image on WhatsApp, according to IndianExpress. The money was withdrawn from an ATM in Hyderabad around 1:35 PM. This shocking theft happened because hackers hid secret code inside a normal-looking picture using a clever trick called “steganography.”
This isn’t the first time such attacks have happened. Similar image-based scams were reported in 2017 and 2019, but they continue to trick people because they’re hard to spot with regular security tools.
What is Steganography? Hidden Messages in Plain Sight
Steganography is like hiding a secret message in plain view. Think of it as invisible ink on a normal letter. In the digital world, it means hiding bad computer code (called malware) inside regular pictures that look completely normal to our eyes.
The hackers used a specific type called Least Significant Bit (LSB) steganography. This means they change tiny color details in the picture that human eyes can’t notice. It’s like changing one grain of sand on a beach – you won’t see the difference, but the computer can read these tiny changes as instructions.
According to experts, a normal-sized picture (1024×1024 pixels) can secretly hold about 384 KB of hidden data – enough space to hide dangerous code that can steal your banking information.
Why Your Antivirus Didn’t Catch It
Traditional security tools are blind to these hidden threats because they look for known patterns of dangerous code (called signatures). But when the bad code is hidden inside a picture’s color information, these tools simply can’t see it.
| Why Old Security Tools Fail | What Works Better |
|---|---|
| Look only for known threats | Smart AI that spots unusual behavior |
| Focus on checking program files | Check all files, including pictures |
| Can’t detect code hidden in images | “Sandbox” testing in safe environments |
Tushar Sharma, a cyber expert and co-founder of TOFEE, explains that these attacks bypass security because the malware is embedded in media files, not in regular program files that antivirus tools typically scan.
How the Attack Happened
- The victim received what looked like a normal image on WhatsApp
- When he downloaded and opened the image, hidden code activated
- This code secretly gained access to his banking information
- Hackers withdrew ₹2.01 lakh from an ATM in Hyderabad
Growing Threat: Statistics Show Increasing Risk
Image-based scams have increased by 30% since 2019, with many targeting banking information. In 2021, a shocking 90% of messaging app phishing attacks happened on WhatsApp. Recent reports from 2025 show multiple cases in India with victims losing between ₹2 lakh and ₹9 lakh each.
Neehar Pathare, Managing Director of 63SATS, warns that these attacks are becoming more sophisticated. “These threats are especially dangerous because they don’t look suspicious at all – just normal pictures that people share every day,” he explained.
How to Protect Yourself
A WhatsApp spokesperson responded to the incident by recommending users block and report any suspicious accounts. They also shared these important safety tips:
- Never download images or files from unknown contacts
- Keep your phone updated with the latest security patches
- Use two-factor authentication for your important accounts
- Be suspicious of unexpected messages, even if they look normal
- Report and block unknown contacts who send files
Experts suggest that artificial intelligence and machine learning offer better protection against these hidden threats. These newer security tools can spot unusual patterns and behaviors that traditional antivirus programs miss.
Zero-Day Threats: The Invisible Danger
Another reason these attacks succeed is because they often use what experts call “zero-day threats” – these are brand new attack methods that security companies haven’t seen before. It’s like a thief inventing a new way to pick a lock that no one has protected against yet.
Behavioral AI and “sandboxing” (testing files in a safe, isolated environment before opening them on your main system) are better at catching these new threats.
The Bottom Line: Think Before You Click
This case shows how even innocent-looking images can hide dangerous threats. The next time you receive a picture on WhatsApp, think twice before downloading it – especially if it comes from someone you don’t know well.
As digital scams become more clever and hard to detect, your best protection is a combination of updated security tools and careful online habits. Remember: if something feels suspicious, it’s better to be safe than sorry.
