A threat actor put a massive database up for sale on an illicit forum containing active mobile phone numbers belonging to hundreds of millions of WhatsApp users globally. The data was compiled via automated scraping techniques and exposed users to heightened phishing risks.