Security researchers are warning WhatsApp users about a new and dangerous account hijacking technique that doesn’t rely on cracking passwords or bypassing encryption. Called GhostPairing, this attack allows attackers to exploit WhatsApp’s perfectly legitimate device pairing feature to silently connect their own browser to the victim’s account. This method allows attackers to access accounts without needing to crack any passwords.
WhatsApp accounts are being stolen without passwords: The GhostPairing threat
The attack typically begins with a text message that appears to come from a trusted person. Often containing a link claiming to show a photo of the recipient, the message offers a preview similar to Facebook content to gain credibility. However, when the user clicks the link, they are redirected to a fake Facebook login page hosted on a similar domain.
Instead of performing any verification, this fake page initiates WhatsApp’s device pairing workflow in the background. Victims are prompted to enter their phone numbers, which triggers a legitimate pairing request. WhatsApp then generates a pairing code, and the attacker displays this code on a fake website, prompting the victim to enter it into their WhatsApp application.
Users often overlook or misinterpret this warning, even though WhatsApp clearly states that a new device is being added during the process. Once the pairing is complete, attackers gain full access to the account without needing authentication information. This allows them to read messages in real-time, download shared media, and send new deceptive messages to the victim’s contact list.
The only reliable way to detect this type of breach is to manually check the Connected Devices section within WhatsApp settings. If an unrecognized device is listed, it should be immediately removed from the account. Experts also recommend reporting suspicious messages, enabling two-factor authentication, and using antivirus software that can flag malicious websites.
This type of attack highlights the critical vulnerability of user awareness, making it crucial to always be vigilant and carefully read platform alerts. How often do you check your Connected Devices menu to ensure your WhatsApp security, and have you ever received a suspicious link from someone you know?
