Archive · 22 Dec 2025
Indian Govt Warns of WhatsApp Ghost Pairing Attacks
There's a new type of cyber attack called 'ghost pairing' that targets WhatsApp users.
Hackers trick people into sharing a special code or clicking on fake links, which lets them take control of the person's WhatsApp account.
The attack starts with a message from someone you know, asking you to check a photo.
When you click the link, it takes you to a fake website that asks for your phone number.
Once you enter it, the hackers can link their device to your WhatsApp without you knowing.
To stay safe, don't share any codes or click on suspicious links.
Always keep your apps and browser updated.
If you think your account has been hacked, check which devices are linked, take pictures of any strange messages or pop-ups, and change your passwords.
Ghost pairing attacks exploit WhatsApp's device-linking feature to hijack accounts.
Attackers trick users into sharing phone numbers via fake messages and links.
The attack begins with a message from a 'trusted' contact containing a malicious link.
Users are advised not to share OTPs, PINs, CVVs, or WhatsApp codes.
If compromised, users should check linked devices, update Chrome, and change passwords.
- Who
- General public using WhatsApp
- What
- Ghost pairing attacks on WhatsApp accounts
- When
- Recently flagged by cyber security agencies
- Where
- India, specifically highlighted by Telangana Cyber Security Bureau and CERT-In
- Why
- To hijack WhatsApp accounts by exploiting the device-linking feature without authentication
- Attack Type
- Ghost Pairing
- Severity
- High
- Initial Contact
- Fake Message or Link
- Target
- WhatsApp Accounts
- Prevention Tips
- Do not share OTPs, PINs, CVVs, or WhatsApp codes. Avoid clicking on unknown links. Keep Chrome and apps updated.
- Action if Compromised
- Check linked devices, take screenshots, save transaction IDs, update Chrome, change passwords.
- Government Advisory
- CERT-In issued a critical advisory
