WhatsApp GhostPairing Lets Scammers Hijack Accounts Without Stealing Passwords
Scammers are tricking WhatsApp users into approving a new linked device, which can let the scammer access messages and account activity without needing the user’s password or login code. This attack relies on persuading someone to tap “approve” on a device-link request that looks legitimate.
Who is at risk
Anyone who uses WhatsApp, especially people who may quickly approve pop-ups or requests without checking why they appeared.
What to watch for
Watch for unexpected WhatsApp prompts asking to link a new device, unusual messages sent from your account, or contacts saying they received strange chats from you.
What to do
Do not approve any device-link request you did not start yourself, and immediately review and remove unknown linked devices in your WhatsApp settings.