Author: admin

The Indian computer emergency response team (CERT-In) has issued an advisory for WhatsApp users warning them of a ‘device-linking’ feature that can allow attackers to take ‘complete’ control of their account. The advisory, accessed by news agency PTI says that the vulnerability called ‘GhostPairing’ put users’ messages, photos, and videos on the web version at risk. “It has been reported that malicious actors are exploiting WhatsApp’s device-linking feature to hijack accounts using pairing codes without authentication requirement,” the cyber agency said in the advisory.“This newly identified cyber campaign called GhostPairing enable cyber criminals to take complete control of WhatsApp accounts without needing password or SIM swaps,” the advisory said.For those unaware, CERT-In is the national technology arm under the Ministry of Electronics and Information Technology (Meity) to combat cyber attacks and guarding of the Indian Internet space.

What is GhostPairing

GhostPairing is a type of WhatsApp attack where hackers secretly link their own device to a victim’s WhatsApp account, giving them almost full access without the victim noticing. The attack works by tricking users into entering their phone number on a fake website that looks like Facebook or WhatsApp.According to the advisory, the scam usually starts with a message such as “Hi, check this photo” that appears to come from a trusted contact. The message includes a link with a Facebook-style preview. When users click it, they are taken to a fake Facebook viewer page that asks them to “verify” to see the content. At this stage, attackers exploit WhatsApp’s “link device via phone number” feature by convincing users to enter their number. Once they do, the attacker’s browser becomes a hidden, trusted device — allowing them to take over the WhatsApp account.Once linked, attackers can read synced messages, receive new chats in real time, view photos, videos, and voice notes, and even send messages to the victim’s contacts and group chats.

How to stay safe

The advisory warns users not to click on suspicious links, even if they appear to come from known contacts, and to never enter their phone number on external websites claiming to be WhatsApp or Facebook.