New Zero

Gbhackers •Divya • May 27, 2026

A newly uncovered zero-click attack targets iPhone users running iOS 16, allowing threat actors to hijack WhatsApp accounts without any user interaction, visible prompts, or warnings linked devices. The campaign was first documented by Italian digital forensics firm Forenser, after multiple users reported that their WhatsApp accounts were sending fraudulent money requests to recent […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zero-Click Attack Compromises WhatsApp Accounts on iOS 16 A sophisticated zero-click attack has been identified, targeting iPhones running iOS 16 and enabling attackers to hijack WhatsApp accounts without user interaction. The attack exploits vulnerabilities CVE-2025-43300 and CVE-2025-55177, allowing unauthorized access to WhatsApp sessions. Victims report their accounts sending fraudulent money requests without any notifications or linked device alerts. The Italian digital forensics firm Forenser confirmed the attack after multiple user reports. Users are advised to update their iOS and WhatsApp apps, lock their chats, and verify any money requests through direct communication. This incident illustrates the growing sophistication of cybercrime, particularly financially motivated attacks leveraging zero-day exploits. The attack is ongoing, with no confirmed patch available for the vulnerabilities yet. 4 sources 70

New Zero

The full story

Extracted Entities

Attack Types (1)

Platforms (3)