WhatsApp Account Hijacking Exploits Device Linking Feature

WhatsApp Account Hijacking Exploits Device Linking Feature

First seen 17 Dec 2025, 20:55 UTC •BleepingcomputerIndependentTech.Yahoo •55.9

Article Content

Browse articles
ThreatCluster

Threat actors are exploiting WhatsApp's device-linking feature to hijack accounts through a campaign named GhostPairing. This attack method does not require authentication, as victims are deceived into linking the attackers' browser to their WhatsApp account. The campaign was initially identified in Czechia but is capable of spreading to other regions.

Ask AI about this cluster

How this analysis works

Extracted Entities

1 / 2