CERT-In Issues High-Risk Alert for WhatsApp Users: Don't Open These Files or Your Device Could Be Hacked

If you use WhatsApp Web or WhatsApp Desktop on your Windows computer, you should be extra cautious. The Indian Computer Emergency Response Team (CERT-In) has issued a fresh cybersecurity warning, alerting users about a dangerous malware campaign in which hackers are distributing fake business documents through compromised WhatsApp accounts.

According to CERT-In, opening these malicious files can allow cybercriminals to steal personal information, install malware, and even gain remote access to your computer.

How the New WhatsApp Scam Works

CERT-In revealed that attackers first compromise a legitimate WhatsApp account before using it to send fake documents to the victim's contacts.

Since the message appears to come from a trusted friend, colleague, or family member, recipients are more likely to open the attachment without verifying its authenticity. This makes the scam highly effective.

Windows Users Face the Highest Risk

The government cyber agency has warned that users accessing WhatsApp Web or WhatsApp Desktop on Windows computers are the primary targets of this attack.

Because the files are delivered through trusted contacts, users often fail to recognize the threat until it is too late.

Beware of These Fake Files

According to CERT-In, attackers are mainly using Visual Basic Script (.vbs) files to launch malware attacks.

These files are disguised with convincing names such as:

Invoice

Payment Record

Bank Statement

Account Details

Windows Update

The realistic filenames are designed to trick users into opening the attachment.

What Happens If You Open the File?

Opening a malicious .vbs file can trigger several serious security risks, including:

Automatic installation of malware

Remote access to your Windows computer

Theft of passwords and sensitive personal information

Installation of spyware and ransomware

Compromise of the entire network connected to the device

CERT-In warns that a single click may be enough to expose your system to cybercriminals.

CERT-In's Safety Tips for WhatsApp Users

To stay protected, the government has advised users to follow these cybersecurity precautions:

Never open suspicious files received on WhatsApp.

Avoid opening files with the .vbs extension.

Verify unexpected attachments with the sender through a phone call or another trusted communication channel.

Keep your Windows operating system updated with the latest security patches.

Install and regularly update antivirus software.

Do not click on suspicious links or unknown attachments.

Stay Alert Against Cyber Threats

Cybercriminals are increasingly exploiting trusted messaging platforms like WhatsApp to spread malware. Since these attacks often originate from compromised accounts of known contacts, users should verify every unexpected attachment before opening it.

Following basic cybersecurity practices and remaining cautious while using WhatsApp Web or WhatsApp Desktop can significantly reduce the risk of falling victim to such attacks.