Spear-phishing technique used in WhatsApp phishing attack.Attackers exploited QR code and spoofed WhatsApp pages.Non-governmental organizations (NGOs) remain primary targets.Importance of defensive strategies such as phish-resistant authentication and employee awareness training.