New Delhi59 minutes ago
- copy link
Indian cyber security agency CERT-In has issued a warning for WhatsApp users. The agency said that hackers are hacking accounts by misusing the device linking feature of WhatsApp.
This new campaign has been named Ghost Pairing. In which hackers take control of the entire account without the need for password or SIM swap. They can read real time messages, view photos and videos and even send messages to your contacts.
What is a Ghost Pairing Campaign and how does it work?
According to the advisory of CERT-In, this is a high severity attack. Hackers take advantage of WhatsApp’s ‘Link device via phone number’ feature. The attack starts when you receive a message from a known contact. Like- Hi, check this photo. It contains a link that shows a Facebook style preview.
Clicking on the link opens a fake Facebook viewer page, which asks for verification to view the content. Here the user is asked to enter the phone number. As soon as you enter the number, the hackers’ device gets linked to your account. They gain access like a hidden device by using the pairing code. After this they can see and use everything like WhatsApp Web.
What do hackers get?
Once the device is linked, hackers have the power to read old messages, receive new messages in real time, view photos, videos and voice notes, and send messages to your contacts and groups. The user doesn’t even know because it happens in the background. CERT-In said that in this way the victims unknowingly give complete access to the hackers.
What did CERT-In say in the advisory?
It is written in the agency’s advisory that malicious actors i.e. hackers are using the device linking feature of WhatsApp to hack accounts with pairing codes, that too without the need for authentication. This new ghost pairing campaign gives cybercriminals complete control without requiring passwords or SIM swaps.
This campaign was first seen in Czechia, but it can spread worldwide through compromised accounts. There has been no response from WhatsApp on this news yet.
How to protect yourself from ghost pairing
- Do not click on suspicious links from known contacts on the app
- Do not enter your phone number on external sites claiming to be WhatsApp or Facebook.
- Keep checking Linked Devices section in the app and logout unknown devices
- Keep two-step verification on in your WhatsApp account, this will provide extra security.
- If the account gets hacked, immediately complain to the cyber cell and email WhatsApp support.
Users should always be alert
This campaign can spread quickly because messages are being sent from hacked accounts to new targets. Cyber experts say that users should always remain alert. If WhatsApp releases any update, install it immediately.
Read this news also…
It is not necessary to keep print of general ticket in the train: Railways said – showing digital ticket on mobile is enough, traditional dishes will be available in Vande Bharat
It is not necessary to have a general print out for traveling by train. Indian Railways has cleared the confusion regarding general i.e. unreserved tickets. Railways said that it is not necessary to take a printout of the ticket booked through the UTS (Unreserved Ticketing System) mobile app. Read the full news…
Source link
[ad_3]
