WhatsApp Scam: A new and dangerous cyber scam has emerged for WhatsApp users, which is being called GhostPairing.

WhatsApp Scam: A new and dangerous cyber scam has emerged for WhatsApp users, called GhostPairing. This scam is considered particularly dangerous because it doesn't require an OTP, steal a password, or swap a SIM. Despite this, the scammers gain complete control of the victim's WhatsApp account.

Why did the government issue a warning?

CERT-In (Indian Computer Emergency Response Team), an organization under the Indian government, has issued an alert regarding this new threat. According to CERT-In, cybercriminals are exploiting WhatsApp's device linking feature and tricking users into giving up access to their accounts.

How does the GhostPairing scam work?

The key tactic of this scam is social engineering, which involves tricking the user into making a mistake. According to CERT-In, attackers exploit WhatsApp's Link a Device feature to hijack accounts without any additional authentication.

The government advisory states that this way, cybercriminals can take control of the entire WhatsApp account without the user even realizing what is happening.

How do people get trapped in this trap?

According to CERT-In, victims often receive a message like "Hi, look at this photo." This message may appear to be from a contact the user trusts, or at least appear to be. The message is accompanied by a photo preview, making it appear genuine.

The game starts as soon as you click on the link.

Once the user clicks on the link, they are directed to a web page that asks them to verify their identity to view the photo. This is when WhatsApp's device linking process kicks in in the background.

One click and your account gets hacked.

If the user unknowingly approves this request, the scammer's browser connects to the victim's WhatsApp account. The attacker can then access that account from their device, read messages, and send messages to others.

Why is this scam so dangerous?

The most frightening thing about the GhostPairing scam is that it doesn't require any technical hacking. The user themselves unknowingly grant access, putting their account at risk.

What precautions should be taken?

Following the government's warning, it's clear that WhatsApp users should be extremely cautious before clicking on any unknown link, even if the message appears to be from a known contact. A little carelessness could jeopardize your entire digital life.