New WhatsApp Scam Poses Serious Risk: Hackers Can Hijack Your Chats

A new WhatsApp scam is targeting users with a deceptive message that leads victims to a counterfeit Facebook login page, enabling cybercriminals to hijack accounts via WhatsApp’s device linking feature. According to Report, attackers obtain full remote access to victims’ contacts, chat history, and media files and can impersonate the victim to spread malicious links to their list of friends and family.

The attack proceeds when Facebook credentials are entered, allowing the attacker to trigger device linking, after which WhatsApp sends a QR code or six-digit code to the victim’s device, enabling the takeover. Once linked, the attacker can view and exfiltrate conversations and media, join private groups, and distribute phishing links or malware while potentially blackmailing victims.

Prevention tips include verifying suspicious messages, enabling two-step verification, monitoring linked devices, and keeping apps and devices up to date. September 2, 2025.