[hrrsn]

WhatsApp was never designed with security as a priority. I remember a couple of years ago after it took off investigating it with a packetsniffer when I noticed the phone number verification text let you in the second you finished typing the PIN. I recall either the server was sending the PIN to the device or the device was telling the server what PIN to send in the text. Ridiculously easy to impersonate anyone at that point. Last I checked they had fixed that hole but I'm not surprised others have popped up.