Experts have discovered a new vulnerability in the WhatsApp messenger, which can lead to account blocking.
It is noted that attackers use two “weak points” of the application, namely, binding to a phone number and the ability to deprive a user of access to an account by writing an appeal to the support service, writes Forbes.
When you enter a phone number in the application, the service asks for a confirmation code, which is usually sent via SMS or a call. Attackers enter the wrong code and then request a new one until the messenger blocks the ability to reset the code for twelve hours. After that, the scammers send a request to the messenger's support service with a request to block the account due to the loss of the phone. In this case, the victim's phone number is indicated.
The experts noted that the processing of such complaints from potential users is processed automatically and there is no verification of the authenticity of the sender of the request. In this situation, the owner may lose the account if they do not contact the support service with the problem in time.
