WhatsApp users are being alerted to a new scam known as “GhostPairing” that deceives them into granting unauthorized access to their accounts. This latest threat, recently uncovered by cybersecurity firm Avast, poses a significant risk as victims may remain unaware of the breach for an extended period.
In contrast to previous scams that primarily aimed at stealing passwords, this particular scheme can lead to more severe fraudulent activities. Security experts caution that the perpetrators gaining access to private conversations, voice recordings, and images creates opportunities for impersonation, targeted scams, and extortion.
The scam typically begins with the victim receiving a message from a trusted contact, claiming to have found a photo and including a link. Upon clicking the link, the user is directed to a counterfeit webpage resembling Facebook, prompting them to “verify” their identity before viewing the image. However, this seemingly innocent verification process is part of WhatsApp’s device-linking procedure.
By entering a valid pairing code, victims inadvertently link the attacker’s browser as a device, granting them continuous access to messages, media, and contacts without the need for password changes or account locks. Once compromised, the hacked account sends malicious messages to contacts, amplifying the scam’s reach.
To safeguard your WhatsApp account from such scams, consider the following preventive measures:
1. Regularly check WhatsApp settings for linked devices and remove any unfamiliar ones.
2. Exercise caution with requests to scan WhatsApp QR codes or enter pairing codes from unknown websites.
3. Enable two-step verification and educate your family and group chats about potential threats.
At Reach and our affiliated entities, we and our partners utilize cookies and device identifiers to enhance site experience, analyze usage patterns, and display personalized advertisements. You can opt out of data sharing or selling by selecting the corresponding option at the bottom of the webpage. Kindly note that preferences are browser-specific. Your use of our website and services implies consent to cookie usage and adherence to the practices outlined in our Privacy Notice and Terms and Conditions.