CERT-In has warned WhatsApp users about a new attack that can hijack accounts without OTP by misusing the app’s device-linking feature.