A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal ...

Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing ...

A malicious npm package posing as a WhatsApp API intercepts messages, steals credentials, and links attacker devices after 56 ...

A new WhatsApp scam, called GhostPairing, has begun to quietly unsettle cybersecurity researchers as the attack somehow evades the app's most common security me ...

A new attack abusing a legitimate device pairing feature of the app could be used to penetrate employee WhatsApp Groups.

Security researchers are warning WhatsApp users about a growing account hijacking technique that does not rely on breaking passwords or bypassing encryption. Attackers exploit WhatsApp’s legitimate ...

The so-called GhostPairing scam takes advantage of legitimate features in order to trick WhatsApp users into linking their ...

What makes GhostPairing particularly concerning is that it does not exploit a software vulnerability or weaken encryption.

Over the past six months, the fake package has reportedly been downloaded more than 56,000 times., Technology & Science, ...

Business-grade email server software SmarterMail just patched a maximum-severity vulnerability that allowed threat actors to ...

India’s cyber security agency CERT-In has issued a high-severity advisory about a WhatsApp account takeover campaign called ...

Reportedly, the new WhatsApp update lets users view automatically paired peripheral devices like the Apple Watch, improving ...