The recent hacking of WhatsApp groups belonging to Telangana ministers has created widespread concern. Hackers reportedly circulated dangerous APK files under the name of SBI Bank, along with messages urging users to update their Aadhaar details. Following the incident, Cyber Crime police launched an investigation and issued warnings advising users not to open any APK files received through WhatsApp. Although WhatsApp uses end‑to‑end encryption—meaning only the sender and receiver can view messages, calls, and recordings—cybercriminals are now targeting user vulnerabilities instead of attempting to break encryption. Hackers employ various tactics to gain unauthorized access to WhatsApp accounts and groups.
Stealing OTPs
One of the most common methods used to gain control of a WhatsApp account is social engineering, through which hackers obtain one-time passwords (OTPs). The attacker first installs WhatsApp on a new device and triggers a registration code request. Then, pretending to be from a company or bank, the hacker contacts the victim through a call or message and warns that their account will be blocked unless they share the OTP. If the victim unknowingly provides the code, the hacker gains full control of the account.
Malware Attacks
Hackers may secretly install malware or spyware on a targeted user’s phone. This is usually done through phishing links, fake applications, or deceptive messages. If the malware is installed, it silently transmits WhatsApp messages and other communication data to the hacker. Past allegations involving Pegasus spyware claimed that journalists and political figures were monitored this way, with their WhatsApp messages being tracked without their knowledge.
Exploiting WhatsApp Web/Desktop
Another technique involves gaining access to WhatsApp Web or desktop sessions. If a hacker manages to scan the WhatsApp Web QR code from an unlocked phone, the account can be mirrored and monitored remotely. Even if the victim’s phone goes offline later, the hacker may still continue to access messages and group chats through the linked session.