GhostPairing Attack Allows WhatsApp Account Takeover via Phone Number

First seen 16 Dec 2025, 11:56 UTC • Cybersecuritynews

•24

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The GhostPairing Attack enables cybercriminals to fully control WhatsApp accounts using only the victim's phone number. This method does not require password theft or technical exploits, instead leveraging social engineering and WhatsApp's device linking feature. The attack was first identified in Czechia and poses a risk to WhatsApp users globally.

How this analysis works

Attack Flow

Continue Reading

MuddyWater Targets U.S. Entities Amid Geopolitical Tensions FBI Warns of Russian Hackers Targeting Signal Backup Recovery Keys US Indicts Russian Nationals for $62M Cybercrime Scheme Targeting Critical Infrastructure Russian Intelligence Exploits Signal Backup Flaw, Cryptographic Fix Proposed Russia's Interference Threatens Armenia's Upcoming Elections Phishing Attacks Target German Politicians via Signal App

GhostPairing Attack Allows WhatsApp Account Takeover via Phone Number

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading