WhatsApp users targeted in account takeover attack dubbed GhostPairing
The "GhostPairing Attack" is a social engineering campaign that exploits WhatsApp's device pairing feature by tricking victims into entering WhatsApp authentication codes via fake Facebook pages, authorizing attackers' browsers as linked devices with full access to messages and contacts. Most victims remain unaware that they have been compromised and their WhatsApp account becomes a vector to scam others.
**Never trust unexpected cryptic messages on your messaging platforms, even from contacts you trust, especially if they have links or phone numbers to call. They are most probably phishing. Check your WhatsApp Settings → Linked Devices and remove any sessions you don't recognize.**
#cybersecurity #infosec #scam #phishing #activephishing
https://beyondmachines.net/event_details/whatsapp-users-targeted-in-account-takeover-attack-dubbed-ghostpairing-n-a-y-8-j/gD2P6Ple2L
