WhatsApp users warned of GhostPairing scam hijacking accounts

Hackers are targeting WhatsApp users with a new GhostPairing scam that allows full account access without cracking passwords or encryption safeguards. The scam bypasses traditional authentication methods, posing a significant risk to user privacy and security. Users are advised to check the Linked Devices section to detect any compromises.

A new cyber threat has emerged targeting WhatsApp users through the GhostPairing scam, as reported by TechRadar. This sophisticated attack enables hackers to gain complete control over accounts without needing to break passwords or the app's encryption protections. The method exploits vulnerabilities in the linking process, allowing unauthorized devices to pair invisibly with the victim's account.

According to the report, the scam is particularly dangerous because it does not trigger standard security alerts. WhatsApp's built-in safeguards, such as two-factor authentication, remain intact, yet hackers can still access messages, contacts, and other sensitive data. The publication emphasizes that the Linked Devices section within the app is the only reliable tool for users to identify and revoke suspicious pairings.

No specific details on the scam's origins or affected regions were provided, but the warning urges all WhatsApp users to regularly review their linked devices. This incident highlights ongoing challenges in securing messaging platforms against evolving phishing and pairing exploits. TechRadar published the alert on December 21, 2025, advising immediate vigilance to prevent account hijackings.

Liittyvät artikkelit

IT expert Supangat warns of Lebaran digital scams via WhatsApp and SMS in a press conference illustration.
AI:n luoma kuva

IT expert warns of digital scams ahead of Lebaran

Raportoinut AI AI:n luoma kuva

Ahead of Idul Fitri, IT expert from Untag Surabaya, Supangat, urges the public to heighten vigilance against scams via WhatsApp and SMS. Rising digital transactions are exploited by cybercriminals. Vida founder Niki Santo Luhur identifies two main methods: phishing and malware prevalent in Indonesia.

Security researchers, first reporting via TechRadar in December 2025, warn WhatsApp's 3 billion users of GhostPairing—a technique tricking victims into linking attackers' browsers to their accounts, enabling full access without breaching passwords or end-to-end encryption.

Raportoinut AI

A new security flaw known as Silent Whisper puts billions of WhatsApp and Signal users at risk. Attackers can monitor activity without detection, leading to battery drain and revelation of daily routines. An expert has created a tool that exploits this vulnerability to spy on users undetected.

Scammers are now sending highly personalized SMS posing as delivery personnel, including victims' names, addresses, and sometimes access codes. These messages, tied to recent data breaches, lead to fake sites designed to steal personal information. Authorities advise against clicking links and checking directly with official services.

Raportoinut AI

A prayer app popular in Iran was hacked to send push notifications urging users to surrender as Israeli and US strikes targeted the country. The messages promised amnesty and stated that help was on the way. Residents in Tehran and other cities reported explosions in the early hours of Saturday morning.

Cybercriminals have compromised trusted Linux applications on the Snap Store by seizing expired domains, allowing them to push malware that steals cryptocurrency recovery phrases. Security experts from SlowMist and Ubuntu contributor Alan Pope highlighted the attack, which targets established publisher accounts to distribute malicious updates impersonating popular wallets. Canonical has removed the affected snaps, but calls for stronger safeguards persist.

Raportoinut AI

More than 40 organizations, including Proton, Tor, and AdGuard, have called on Google to abandon a new verification policy for Android developers. They describe it as an 'alien security model' that threatens anonymity and the privacy ecosystem. The appeal highlights concerns over reduced developer privacy in app distribution.

 

 

 

Tämä verkkosivusto käyttää evästeitä

Käytämme evästeitä analyysiä varten parantaaksemme sivustoamme. Lue tietosuojakäytäntömme tietosuojakäytäntö lisätietoja varten.
Hylkää