WhatsApp’s “Two-Step Verification” process can be found under the Settings-Account from within the app. So we are using WhatsApp Web, basically there is no third party tool to access. Clearly, you should not send the SMS code, but it makes absolute sense to set up this additional security layer anyway. In this tutorial, you can learn that WhatsApp can be hacked in few steps. So even if you send the code to the attackers, they would still not have your own PIN. Another security layer with your own password is materially harder to beat. That can be defeated, as recent headlines on SMS security have shown.
It’s easy to see the verification code as the two-factor authentication. This is separate to the six-digit code that WhatsApp will send by SMS to verify a new install. In WhatsApp you can set up a PIN of your own choosing, and even an email address to use if you forget that PIN. WhatsApp has simply been ghosted onto an illegitimate device.
With the account taken over, the attackers could then message the rest of the group as if from the account holder, as well as any other contacts whose WhatsApp messages were received after the take over.
0 kommentar(er)
