Someone trying to hack my WhatsApp Business Account
I've been noticing for a couple of days now that when I'm using my phone, I'm getting those 6-digit passkeys appear on my phone, saying that I'm trying to log in through another device.
Well, I'm not, so I ignored this completely. But unfortunately, today, without sharing any of these passcodes or clicking on that message, someone actually did reach my account, even with 2FA switched on.
I already have a passkey signed up, even with my iCloud Keychain as well.
I immediately tried to retrieve it, and it showed that my account had been moved to a new phone. I tried to retrieve it again, received the SMS, and then signed back in.
But how did it happen? Is WhatsApp that easy to hack, even after multiple attempts from a new device? Shouldn't they have a feature to show which country or device is trying to log in after 2 or 3 attempts? Then, the actual user could block that device from further attempts for some time.
I mean, this is far worse than I thought. Today, for the last 1 hour, I think I got about 30 requests because they are trying so hard to sign in.
And so frequently.
I've turned on all the privacy features, including password, email address, and even passkey. So what else do I have as an option?
Edit: 06 OCT:
- I just tried logging in every hour. I kept getting that new SMS 6-digit code, but apparently it's been automatically signed in. I mean, even without getting that SMS, they still try to log in for some reason.
- I also just noticed that the last seen on this account is the time I was online yesterday evening. It hasn’t accessed any of my chats so far. I tried messaging from another number, but it didn’t even deliver. I honestly don’t know what’s happening.