apparently so

https://www.malwarebytes.com/blog/news/2025...ate_your_Chrome

read la

website is able to steal credentials. used to be hijacking from malicious files only.

if you've used whatsapp web you'll know that credentials is saved in the browser. so every time you open the browser, you'll be able to use whatsapp web directly without needing to scan the qr code all the time.

so, lets assume that he betul betul kena hack
1) uses whatsapp web
2) click link bukan bukan
3) malicious website steals credential
...
5) profit

the way you pusiing, you definitely one

and you are so certain that he doesn't use whatsapp web or uses other brower.

I' only replied to your initial post "so easy kena hack" and yes, it's quite easy if the conditions is right.

then you go menyalak macam anjing gila