Cert-In Warns of Malware Campaign Targeting WhatsApp Web and Desktop Users
India's cybersecurity agency Cert-In has warned WhatsApp Web and desktop users about a large-scale malware campaign distributing malicious Visual Basic Script (VBScript) files via direct messages. Attackers use compromised WhatsApp accounts to send these files to trusted contacts, increasing the risk of users opening them. Successful attacks may allow unauthorized device access, credential theft, further malware deployment, network infection, and financial losses. Users are advised to avoid opening unexpected attachments, even from known contacts.