A new and serious warning has been issued for WhatsApp users. A new scam called 'GhostPairing' has emerged. This scam exploits WhatsApp's 'device-linking' feature to gain control of your WhatsApp account. According to cybersecurity experts, this method gives hackers complete access to users' accounts without requiring a password, SIM swap, or verification code (OTP). This scam is particularly dangerous because it doesn't exploit a software vulnerability; instead, it tricks users into granting access themselves.

How does the GhostPairing attack work?
According to a report by the cybersecurity firm Gen Digital, this scam begins with a message that appears to come from a friend or acquaintance. It might say something like, "Hey, I just found your photo!" The message contains a link that appears within WhatsApp with a preview similar to Facebook. Clicking the link opens a fake webpage that resembles a Facebook photo viewer. To view the content, the user is asked to "verify" their identity. The user is prompted to enter their phone number. WhatsApp then generates an official "pairing code." The hackers instruct the user to enter this code on the fake page, which the user mistakenly believes is a routine security check. As soon as the user enters the code, they unknowingly link the hacker's device to their WhatsApp account.

What access do hackers gain?
Once the code is entered, the hacker gains full access to WhatsApp Web. They can read your messages, download media, send messages to others on your behalf, and view new messages. The most alarming aspect is that your phone continues to function normally, so you remain unaware that your data is being compromised.

This threat is spreading rapidly.
This scam was first observed in Czechia, but it is now likely to spread globally. Since the hacked account is used to send the same link to contacts and groups, people easily fall for it.

How to protect yourself?
Follow these safety measures to avoid this scam. Regularly check your WhatsApp settings under Settings > Linked Devices. If you see any unfamiliar device or browser there, log out immediately. Do not accept any request to scan your WhatsApp 'pairing code' or QR code on any website. Enable 'Two-Step Verification' in WhatsApp, which adds an extra layer of security. If you receive a suspicious link, even from a friend, confirm with them before clicking on it. Caution is key, as attacks like GhostPairing exploit human trust more than technical vulnerabilities.

Disclaimer: This content has been sourced and edited from Amar Ujala. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.