Prosecutor General’s Office warned Kazakhstanis about WhatsApp account hijacking

Tengrinews.kz — Kazakhstan’s Prosecutor General’s Office has warned citizens about a new cyber threat related to the WhatsApp messenger, citing the press service of the agency.
According to foreign sources, cybercriminals have launched a new scheme to hijack WhatsApp accounts. This method, called GhostPairing, does not require password hacking, SIM-swapping, or complex technical attacks. Access to your WhatsApp is gained legally by activating the feature for linking additional devices.
The scenario is simple: a message is sent disguised as a Facebook or WhatsApp notification, redirecting the user to fake pages that visually copy the Facebook/WhatsApp interface.
To “confirm access” to the content, the fake site prompts the user to enter their phone number and verification code. After that, the attacker is automatically added to the victim’s account as a trusted device, gaining full access to WhatsApp (reading messages, viewing media files and contacts, sending messages, accessing the photo gallery), while the phone continues to work as usual, arousing no suspicion.
The only way to detect a WhatsApp hijack is to manually check the “Linked devices” section. Any unfamiliar connection indicates a compromise and must be removed immediately.
The Prosecutor General’s Office urged Kazakhstanis to follow a number of cybersecurity rules:

treat unknown incoming messages, calls, and various notifications with caution;
never enter a WhatsApp code on third-party websites — any request for a code outside the app is always a scam;
use two-factor authentication;
regularly check your account activity;
use security software.