At a Glance
- WhatsApp serves 3 billion users worldwide.
- Researchers revealed a new hijacking method called GhostPairing.
- Austrian scientists exposed billions of numbers via the contact discovery tool.
- Why it matters: Users can now better protect themselves with built-in privacy settings.
WhatsApp’s popularity makes it a prime target for attackers. In December, security researchers exposed a new hijacking technique called GhostPairing that tricks users into linking an attacker’s browser to their device. A month earlier, Austrian researchers fed billions of phone numbers into WhatsApp’s contact discovery tool, creating the most extensive exposure of numbers ever.
GhostPairing Explained
GhostPairing forces users to link a malicious browser session to their WhatsApp account. Once linked, an attacker can hijack the account, read messages, and impersonate the user.
Mass Contact Discovery
Austrian researchers ran the discovery tool against billions of numbers. The results included profile photos, phone numbers, and other personal data, exposing users on a scale never seen before.
Privacy Features You Can Use
WhatsApp offers several built-in options to strengthen privacy:
- Privacy Checkup – control who sees your profile photo, About, status, and last seen.
- Disappearing Messages – set a timer (24 h, 7 days, 90 days) for messages to delete automatically.
- Two-Step Verification – add a PIN and optional email to prevent unauthorized account access.
- App Lock / Chat Lock – use FaceID, TouchID, or fingerprint to lock the app and selected chats.
- Advanced Security Settings – block unknown messages, hide your IP address during calls, disable link previews.
- Advanced Chat Privacy – prevent media auto-download, restrict AI usage, and stop chats from leaving the app.
- Disable Read Receipts – stop the blue tick from showing you have read a message (and vice-versa).
- Turn Off Media Downloads – stop photos and videos from saving automatically.
Ellie Heatrick, WhatsApp spokesperson, said:
> “We continue to lead the industry in meaningful innovations that protect people’s messages and calls, including through collaboration with security researchers to strengthen our defenses.”
These features aim to keep conversations private even if a device is compromised.
Key Takeaways
- WhatsApp’s 3 billion-user base attracts sophisticated attacks like GhostPairing.
- The contact discovery tool exposed billions of numbers, highlighting privacy gaps.
- Users can employ built-in settings-Privacy Checkup, disappearing messages, two-step verification, app lock, and more-to safeguard their data.
By understanding these tools and staying vigilant, WhatsApp users can better defend themselves against emerging threats.
