Security experts have warned that an ongoing WhatsApp attack campaign doesn’t require your password to access your account.