Malaysians report being targeted by malware file sent through WhatsApp

Malaysian WhatsApp users are being targeted by a malware campaign that distributes malicious ZIP files disguised as PDFs. Security experts warn that opening these files can lead to device hijacking and the theft of sensitive banking information.
Why it matters
The rise in sophisticated phishing attacks via messaging platforms poses a direct threat to personal cybersecurity and financial safety for users in the region.
Malaysians are reporting on Threads that they are receiving malicious ZIP files masquerading as legitimate PDF files from what appear to be trusted contacts on WhatsApp.
Some users even claim that opening these files may result in a device being hijacked, with passwords and accounts being stolen.
Cybersecurity firm Trend Micro reported similar cases involving Brazilian WhatsApp users last October.
Findings from the company include that compromised WhatsApp accounts would be used to further spread the infection by sending the ZIP file to other contacts.
The file would also be sent alongside instructions for recipients to open it on a PC and, if opened, quietly instructs the computer to download and install malware in the background without users noticing.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in