A new WhatsApp account-hacking campaign called HackOnChat is rapidly spreading worldwide by using social engineering and impersonation techniques via malicious URLs and portals. The campaign primarily targets users in the Middle East and Asia, exploiting WhatsApp’s web interface to hijack accounts and carry out further scams. #HackOnChat #WhatsAppSecurity
Keypoints
- The campaign uses social engineering tactics like fake security alerts and spoofed portals to trick users.
- Attackers leverage Session Hijacking and Account Takeover techniques to compromise WhatsApp accounts.
- Malicious URLs are hosted on inexpensive domains and generated rapidly for widespread deployment.
- Once compromised, accounts are used to target contacts with fraud, extortion, or phishing messages.
- The campaign highlights the effectiveness of social engineering and trusted interfaces for scalable cyberattacks.
Read More: https://thehackernews.com/2025/11/ctm360-exposes-global-whatsapp.html