WhatsApp allows users to connect to WhatsApp Web or the desktop app by linking additional devices, but hackers are exploiting ...

A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web API library, and then it steals ...

A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal ...

Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing messages and maintaining persistence.

The exploit allows malicious actors to take 'complete' control of a user's WhatsApp account without needing a password, an OTP, or a physical SIM swap ...

The scam usually starts with a short, casual message that appears to come from someone the victim already knows and trusts.

Indian government warns WhatsApp users about the GhostPairing scam that silently hijacks accounts using device linking.

The cyberattack exploits the multi-device login feature of WhatsApp, gaining access to the victim's account without leaving any trace or hint.

It started with a moment of confusion that felt almost trivial. A Mumbai-based accountant received a message from a colleague ...

The Indian computer emergency response team (CERT-In) has issued an advisory for WhatsApp users warning them of a ...

Hyderabad police have warned users about ‘GhostPairing’, a new WhatsApp scam that exploits the app’s device-linking feature ...

Threat actors are abusing the legitimate device-linking feature to hijack WhatsApp accounts via pairing codes in a campaign dubbed GhostPairing. This type of attack does not require any authentication ...