Cybercriminals have unleashed a new wave of digital attacks that threaten to compromise WhatsApp accounts and the mobile phones linked to them.
The United States Cybersecurity and Infrastructure Security Agency (CISA) has issued a new warning that highlights the rapid spread of these schemes and the ease with which victims can lose control of their accounts.
The hackers use spyware, fake apps, malicious links, and psychological manipulation to deceive users. With messaging platforms now holding personal, financial, and even political conversations, this threat places millions at immediate risk.
CISA Warns of New Tricks Criminals Use To Hack WhatsApp Accounts
CISA reports that advanced spyware tools are now targeting WhatsApp users directly. Hackers are no longer relying only on weak passwords or insecure networks. They are attacking both the app and the mobile device itself.
The agency says these attackers use social engineering to trick users into giving away verification codes or installing harmful apps that look legitimate. Once inside an account, the intruder can install more malware, steal sensitive information, or transfer the account to their own device.
The rise of these attacks highlights a dangerous trend. Mobile messaging platforms have become prime targets because they store everything from private chats to financial confirmations. CISA urges users to take immediate action to secure their WhatsApp accounts before they fall victim to this growing threat.
How Criminals Hack WhatsApp Accounts Today
Cybercriminals are using multiple methods to compromise WhatsApp accounts. Some send malicious links or QR codes that redirect you to fake login pages. Others create apps that appear safe but install spyware once downloaded. A common trick involves deceiving you into sharing your one-time WhatsApp verification code. Once they have that code, they can move your account to their own phone, locking you out instantly.
Hackers also rely heavily on social engineering. They pretend to be WhatsApp support, a friend in trouble, or even a family member who needs you to “confirm” something. One moment of confusion or panic is enough for them to gain full control. These tactics have increased worldwide, making every user a potential target.
Key Steps to Protect Your WhatsApp Account
CISA stresses that most defences depend on user awareness. The first rule is simple. Never share your WhatsApp registration code with anyone. Even someone you trust can be impersonated by a hacker.
Next, enable two-step verification by going to Settings then Account. This adds a PIN that only you know. Once enabled, even if someone gets your code, they cannot access your account without this PIN.
You should then add and verify your email address. This email helps you recover your account if someone attempts to hijack it or if you forget your PIN. WhatsApp has also introduced passkeys for stronger protection. When you enable all three features, you create a barrier that is extremely difficult for attackers to break.
Also be cautious about what you install. Download apps only from official stores. Do not tap on unknown links, scan random QR codes, or open suspicious attachments. These simple steps can stop most attacks before they happen.
WhatsApp’s New Updates and Why They Matter
While warning users about rising cyber threats, WhatsApp is also expanding its features. The platform is testing Guest Chats, a new function that allows users to communicate with people who do not have the app. This feature aims to connect users across basic feature phones and smartphones. It shows WhatsApp’s push to reach every type of device, especially in regions where feature phones remain common.
However, increased accessibility means increased risk. The wider the communication network grows, the more attractive it becomes to hackers. This makes CISA’s warning even more urgent. Users must protect their accounts now, before attackers find new loopholes to exploit.
WhatsApp remains one of the most popular messaging apps in Kenya and around the world. But popularity also makes it a prime target for hackers. The new cyber trick that aims to hack WhatsApp accounts is a reminder that digital safety is no longer optional. Every user must take responsibility for securing their information, their conversations, and their devices.
