Attackers are setting up PINs in hijacked accounts to make it more difficult to recover stolen accounts.

Unfortunately, there is a nasty new twist to this hijack. The two numbers are different-but both are needed to enable a new install. In addition to the six-digit SMS authentication code WhatsApp sends to authenticate a new install, the app also allows you to set a six-digit PIN of your own. MORE FROM FORBES Why You Should Stop Using Facebook Messenger By Zak Doffmanįortunately, WhatsApp provides a surefire way to prevent your account being hijacked in this way. With your account under their control, the attacker can message your contacts. The attacker won’t have your contacts or message history, but they will receive your new messages and see those contacts and other members of groups you belong to.

As soon as you send the attacker the code, they immediately hijack your account. That code is obviously a WhatsApp authentication code for your account. They say they've asked the network to text you their unlock code-please forward it to them.

The attacker messages you on SMS or Facebook, pretending to be your friend, claiming to have locked out their phone. They install WhatsApp on a device and enter your number as the account-the system then texts you the SMS code. An attacker gets holds of your number from the compromised account of a friend.

Is whatsapp safe from police