‘GhostPairing’ attack enables complete WhatsApp account control, Indian cyber agency warns

Indian cyber security agency CERT-In has flagged a vulnerability in WhatsApp’s device-linking feature that allows attackers to gain “complete” control of user accounts, including access to real-time messages, photos and videos on the web version.

In an advisory issued on Friday and accessed by PTI, the Indian Computer Emergency Response Team named the issue “GhostPairing”.