Security experts have warned that an ongoing WhatsApp attack campaign doesn’t require your password to access your account. Here’s what you need to know.