
First of all you will be reminded to be in the chat that you want to spam. Follow the instructions shown in the popups. This script is safe to use in regards to that. If you are not sure what it does, then you should not use it. You should not put anything in console for any website unless you are absolutely sure that what it does. Copy the code from whatsapp-spammer.js and paste it in the developer console. For more information about developer console for chrome and for Edge. You can also use Option + ⌘ + J (on macOS), or Shift + CTRL + J (on Windows/Linux). Right click on webpage anywhere and select inspect element. There are many ways to open the developer console. It works for both individual and group chats. Open (Edge and Chrome are recommeded, It is not working on firefox as on version 1.1.0). This is script for spamming the message from whatsapp web. I would like to point out that using this script for extensive spamming of messages on whatsapp is not recommended and it is violation of the TOS of whatsapp. Author of this script does not accept responsibility for banned accounts or penalties of any kind caused by the use of this tool. Any type of criminal activity is not promoted by the author of this script. Any damage caused by this script is not the responsibility of the author of this script. By running this script you agree to use it at your own risk and that you are responsible for any damage caused by this script. Author of this script is not responsible for any damage caused by this script. This script is just the tool for educational and testing purposes.
WhatsApp’s “Two-Step Verification” process can be found under the Settings-Account from within the app. Clearly, you should not send the SMS code, but it makes absolute sense to set up this additional security layer anyway. So even if you send the code to the attackers, they would still not have your own PIN. Another security layer with your own password is materially harder to beat.
That can be defeated, as recent headlines on SMS security have shown. It’s easy to see the verification code as the two-factor authentication. This is separate to the six-digit code that WhatsApp will send by SMS to verify a new install. In WhatsApp you can set up a PIN of your own choosing, and even an email address to use if you forget that PIN.
WhatsApp has simply been ghosted onto an illegitimate device. With the account taken over, the attackers could then message the rest of the group as if from the account holder, as well as any other contacts whose WhatsApp messages were received after the take over.