WhatsApp allows users to connect to WhatsApp Web or the desktop app by linking additional devices, but hackers are exploiting ...

The exploit allows malicious actors to take 'complete' control of a user's WhatsApp account without needing a password, an ...

A new scam dubbed GhostPairing is targeting WhatsApp users by abusing the app’s device-linking feature. The attack tricks ...

A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal ...

It started with a moment of confusion that felt almost trivial. A Mumbai-based accountant received a message from a colleague ...

Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing messages and maintaining persistence.

Indian government warns WhatsApp users about the GhostPairing scam that silently hijacks accounts using device linking.

Threat actors are abusing the legitimate device-linking feature to hijack WhatsApp accounts via pairing codes in a campaign ...

A new attack abusing a legitimate device pairing feature of the app could be used to penetrate employee WhatsApp Groups.

The scam usually starts with a short, casual message that appears to come from someone the victim already knows and trusts.

The 'GhostPairing' vulnerability in WhatsApp enables attackers to seize full control of an account, providing them with ...

A malicious npm package posing as a WhatsApp API intercepts messages, steals credentials, and links attacker devices after 56 ...