The ghosts of WhatsApp: How GhostPairing hijacks accounts
ID: 293baa4f-c914-52c2-9a1d-7340937fa9e5
STIX ID: report--293baa4f-c914-52c2-9a1d-7340937fa9e5
Feed Name: Malwarebytes Blog
Threat Score
GhostPairing is an active phishing campaign that lures WhatsApp users to a fake Facebook-style page prompting a phone number or pairing code; when victims follow the instructions and complete WhatsApp’s device-pairing flow (via QR or numeric code), attackers silently add a browser as a linked device and gain access to messages, media, and contacts, enabling impersonation, propagation of the scam, and data harvesting.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.