A malicious npm WhatsApp library with 56,000 downloads secretly stole messages, credentials, and contacts in a sophisticated ...

Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing ...

A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web API library, and then it steals ...

Hackers have found a way to quietly take over WhatsApp accounts without touching passwords, SMS codes, or the app’s ...

A new WhatsApp scam, called GhostPairing, has begun to quietly unsettle cybersecurity researchers as the attack somehow evades the app's most common security me ...

Security researchers are warning WhatsApp users about a growing account hijacking technique that does not rely on breaking passwords or bypassing encryption. Attackers exploit WhatsApp’s legitimate ...

In context: WhatsApp is one of the most popular communication platforms of all time with around three billion users worldwide. This means that even the slightest security flaw in the app could pose a ...

A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal ...

GhostPairing is a sophisticated social engineering attack that abuses WhatsApp's legitimate multi-device linking functionality. Malicious actors trick users into unknowingly pairing an attacker's ...

A cybersecurity company has found a new method for taking over WhatsApp accounts that exploits the app's legal device-linking ...

WhatsApp is rolling out a new iOS feature that lets users view silently connected peripherals in Linked Devices, making it ...

If you suddenly receive a message from one of your friends asking you to vote, be on high alert. A new text scam is making its rounds across parts of Europe, and falling for it could result in you ...