Cybersecurity experts in the United States have raised the alarm over a dangerous new method hackers are using to break into WhatsApp and other messaging platforms.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a fresh advisory warning users about advanced spyware and hacking tools that are now being deployed to compromise both messaging accounts and the smartphones they are linked to.
According to CISA, cybercriminals are using powerful spyware software designed to secretly infiltrate WhatsApp accounts and gather sensitive information.
The agency is urging users to review their security settings immediately to prevent hackers from gaining unauthorised access to their accounts and personal data.
CISA notes that these attackers rely heavily on “highly targeted and sophisticated social engineering tricks” to deceive unsuspecting users.
Once a hacker gains access, the attack can go beyond the app itself and install additional malicious software that further compromises the victim’s device.
These attacks can be launched through many methods, including malicious links, dangerous QR codes, fake app installations, mobile malware, and counterfeit apps disguised as trusted ones. Users are often tricked into installing these fake apps, unknowingly giving hackers a direct pathway to their data.
One of the main tactics involves social engineering, where attackers manipulate users into sharing a one-time verification code. According to Forbes, once the hacker obtains this code, they can move your WhatsApp account to their own phone, locking you out and leaving you to struggle to recover it.
CISA stresses that most protection against such attacks depends on user awareness. People are urged to avoid clicking suspicious links, never install apps from unverified sources, and refrain from opening unknown files or attachments.
These new warnings come at a time when mobile messaging apps are becoming a major target for hackers who are after personal, financial, and sensitive information stored on smartphones.
What You Should Do to Stay Safe
- Never share your WhatsApp verification code — not even with close friends or family. Hackers often use this code as their entry point to hijack accounts.
- To strengthen your security, open WhatsApp, go to Settings > Account, and turn on Two-Step Verification. This creates a special PIN that only you know, adding another layer of protection.
- Add and verify your email address. This helps you recover your account if it gets compromised or if you forget your PIN.
- WhatsApp has also introduced passkeys, an extra security option that makes it even harder for someone to access your account without permission. Setting up two-step verification, email recovery, and a passkey provides the highest level of protection.
WhatsApp’s New Feature Update
As these security concerns rise, WhatsApp is also working on new developments to improve user experience. The company recently revealed that it is testing a new feature meant to help users connect with people who don’t have the app.
The feature, called Guest Chats, will let WhatsApp users communicate with friends and relatives who use basic feature phones. This means more people will be able to connect across different devices, improving accessibility and making communication easier for everyone.
Join Gen z Official WhatsApp Channel to share your thoughts and stay updated on time
https://whatsapp.com/channel/0029VaWT5gSGufImU8R0DO30

