Security researchers, first reporting via TechRadar in December 2025, warn WhatsApp's 3 billion users of GhostPairing—a technique tricking victims into linking attackers' browsers to their accounts, enabling full access without breaching passwords or end-to-end encryption.
WhatsApp, Meta's popular messaging app with over 3 billion users, faces ongoing risks from GhostPairing, a sophisticated account takeover method uncovered in December 2025. As detailed in TechRadar's December 21 alert, attackers exploit the device linking process to pair invisibly, bypassing standard security alerts and two-factor authentication to access chats, contacts, and data.
The attack's stealth underscores vulnerabilities in widely used apps. Users should immediately review the Linked Devices section to detect and revoke suspicious pairings, and enable all available privacy and security features. Vigilance remains crucial as threats evolve.
