B&Gs

🚨 BREAKING: HACKERS ARE TURNING WHATSAPP INTO A MALWARE DISTRIBUTION NETWORK ACROSS MULTIPLE COUNTRIES. A dangerous cyberattack campaign is targeting WhatsApp users, disguising malware as legitimate financial documents, invoices, bank statements, and business files. And there’s a disturbing twist: the messages can come from people you already know. Here’s what we know: 🇲🇾 MALAYSIA • October 29: MyCERT confirmed an active malware campaign distributing malicious ZIP attachments through WhatsApp. • Files impersonate invoices, account statements, e-statements, and payment documents. • Messages come from potentially compromised contacts or fake business identities. • The malware can install remote-access backdoors on Windows computers. 🇸🇬 SINGAPORE • October 28: SingCERT issued an official advisory after receiving multiple reports of malware campaigns spreading through compromised WhatsApp accounts. • November 2: Singapore Police issued another warning about malicious attachments disguised as business documents. • Hackers can steal credentials, record keystrokes, capture screenshots, and compromise WhatsApp accounts. 🌍 OTHER COUNTRIES IDENTIFIED Kaspersky’s June 22 research identified victims across multiple countries and territories, including: 🇲🇾 Malaysia 🇧🇷 Brazil 🇸🇬 Singapore 🇹🇼 Taiwan 🇻🇳 Vietnam Malaysia had the highest number of observed victims in that particular campaign. HOW THE ATTACK WORKS: Hackers compromise a WhatsApp account. They send malicious ZIP, ISO, or disguised document files to existing contacts. Victims are instructed to open or extract the files on a Windows computer. Running the malicious program installs malware or a remote-access backdoor. Hackers can steal sensitive information and use compromised accounts to spread the malware further. ⚠️ PROTECT YOURSELF: • Never open unexpected ZIP, RAR, ISO, or EXE attachments. • Verify suspicious files directly with the sender through a phone call. • Enable WhatsApp Two-Step Verification. • Check your Linked Devices regularly. • Never share your WhatsApp verification code or PIN. IMPORTANT: These are documented campaigns from different reporting periods, not proof that all five countries are experiencing the exact same attack simultaneously. Your WhatsApp contact list could become the next distribution channel. DON’T TRUST AN ATTACHMENT JUST BECAUSE IT COMES FROM SOMEONE YOU KNOW. Stay alert. Stay protected.