EXPLAINER: How WhatsApp Users Are Targeted By Spyware Attackers
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a new alert to warn WhatsApp and other messaging platform users about new spyware and hacking tools aimed at them.
According to the advice, these intrusions target both messaging accounts and related mobile phones.
According to CISA, cybercriminals use powerful spyware to access WhatsApp accounts.
The agency emphasized the necessity of users monitoring their account security right away to avoid unauthorised access.
Cyber threat actors use “sophisticated targeting and social engineering” strategies to obtain access to chat apps.
⚠️ CISA Warns of Hackers Leveraging Commercial Spyware to Target Users of Signal & WhatsApp
— Cyber Security News (@The_Cyber_News) November 26, 2025
Source: https://t.co/FM36vUa7GI
CISA warns of multiple cyber threat actors actively deploying this sophisticated malware to compromise users’ smartphones, using methods designed to… pic.twitter.com/02lll1V6tG
Once inside, these attacks might install other malicious software, further compromising the victim’s device.
According to the agency, these assaults can occur via dangerous URLs, QR codes, app installations, mobile viruses, or even phony apps masquerading as real ones that deceive users into installing and then using them to access data.
According to Forbes, hackers also use social engineering, which involves tricking users into revealing a one-time code that allows them to transfer your account to their own device, leaving you with the problem of recovering it.
CISA also stated that most defenses against these attacks rely on user prudence, encouraging users to avoid clicking on dubious links and installing apps outside of legitimate shops.
The latest warning comes amid growing concerns about the security of mobile messaging apps, which have been a popular target for hackers looking for sensitive personal or financial data.
What To Do.
Never reveal your WhatsApp registration code to anyone, including friends and family, as this is one of the methods hijackers use as a launching pad.
ALSO READ:
- Meth Worth Ksh10 Million Nabbed At JKIA Packed On Handmade Clothes
- Court Rules On Amos Kimunya’s Ksh 60M Land Case, Frees Trio Implicated
- Kirinyaga Women Rep Blocked From Accessing School Despite Lobbying Its Construction
- Kenya, Türkiye Sign Defence Pact Months After Drone Acquisition
- KUCCPS Announces Portal Opening Date As Application Window Closes
To protect your account, open WhatsApp, select Settings, then Account, and enable two-step verification. This adds a PIN that must be remembered and is necessary for increased security.
Next, enter and verify your email address, which will allow you to retrieve your account if it is compromised or you forget your PIN.
Additionally, WhatsApp now allows users to add a passkey to further strengthen account protection.
Completing all three steps, two-step verification, email verification, and passkey setup, makes your account fully secure.
EXPLAINER: How WhatsApp Users Are Targeted By Spyware Attackers
