CERT-In has flagged a high-risk cyber campaign named GhostPairing, exploiting WhatsApp’s device-linking feature to hijack user accounts. Attackers trick victims into entering their phone numbers on fake links disguised as trusted messages, silently linking an attacker-controlled device. Once compromised, attackers can read messages, send messages as the user, access media, and spread the attack further through contacts and groups. CERT-In advises avoiding suspicious links, regularly reviewing linked devices, and strengthening organizational controls, awareness training, and incident response measures for WhatsApp Business accounts.