CERT-In has flagged a high-severity WhatsApp account takeover technique that exploits device linking to give attackers silent access without passwords or SIM swaps