Microsoft and Malwarebytes have identified a new attack targeting WhatsApp Desktop users.
This isn’t a software bug — it’s social engineering.
👉 Here’s how the attack works:
- 📩 You receive what looks like a normal attachment on WhatsApp
- ⚙️ The file is actually a script (e.g. .vbs)
- 🕵️♂️ When opened, it quietly uses built-in Windows tools to download malware
- 🔓 The attacker can then gain remote access to your PC and data
Because it uses legitimate tools and trusted cloud services, it can be very hard to detect.
🔒 How to stay safe:
- 🚫 Don’t open unexpected attachments — even from known contacts
- 👀 Turn on file extensions in Windows (so you can spot .vbs, .msi, etc.)
- 🛡️ Keep your anti-malware software up to date
- 🌐 Only download/install software from official vendor sites
- ⚠️ Watch for warning signs (UAC prompts, slow system, unknown apps)