The Indian Computer Emergency Response Team (CERT-In) has issued a fresh cybersecurity advisory warning WhatsApp Web and WhatsApp Desktop users about a dangerous malware campaign that is spreading through compromised WhatsApp accounts. According to the advisory, cybercriminals are distributing malicious Visual Basic Script (.vbs) files via direct messages, potentially giving attackers access to victims' computers and sensitive information.
Security experts are urging users to verify every unexpected attachment before opening it, even if it appears to come from a trusted contact.
Why Has CERT-In Issued This Warning?
According to CERT-In, cybercriminals are actively targeting users through a large-scale malware distribution campaign affecting WhatsApp Web and WhatsApp Desktop.
The advisory, based on security findings from Kaspersky and Securelist, warns that attackers are exploiting compromised WhatsApp accounts to spread malicious attachments disguised as legitimate files.
Because the messages originate from trusted contacts, users are far more likely to open the attachments without suspecting foul play.
How Does This WhatsApp Malware Attack Work?
The attack follows a simple but highly effective strategy:
Cybercriminals first gain access to a user's WhatsApp account.
They send a malicious .vbs (Visual Basic Script) attachment to the victim's contacts.
Friends, colleagues, or family members receive the file from someone they know and trust.
If the attachment is opened, malicious code executes on the victim's computer.
This technique relies heavily on social engineering rather than technical vulnerabilities.
What Happens If You Open the Malicious File?
Opening a malicious VBScript attachment can expose users to several cybersecurity risks, including:
Remote access to the infected computer
Theft of passwords and login credentials
Installation of additional malware
Unauthorized access to sensitive personal or business data
Infection spreading across an organization's network
Business disruption and financial losses
In corporate environments, a single compromised system can potentially affect multiple connected devices.
CERT-In's Safety Tips for WhatsApp Users
The cybersecurity agency has advised users to follow these precautions:
Never open unexpected attachments without verification.
Confirm suspicious files by calling or messaging the sender separately.
Be cautious if a contact suddenly sends unusual files or behaves differently than normal.
Avoid downloading unknown script files or executable attachments.
Keep your operating system and antivirus software updated.
Regularly scan your device for malware.
Enable two-factor authentication wherever possible.
Why WhatsApp Web Users Are More Vulnerable
Unlike smartphones, WhatsApp Web and Desktop operate on computers that often contain:
Office documents
Banking information
Business credentials
Personal files
Company networks
A successful malware infection can therefore have much broader consequences than compromising a single messaging app.
Cybersecurity Threats Continue to Rise
CERT-In has repeatedly warned users and technology companies about the increasing sophistication of cyberattacks, including AI-assisted scams, phishing campaigns, and malware distribution.
The latest advisory highlights how attackers are increasingly exploiting trusted messaging platforms to trick users into compromising their own devices.
Stay Alert Before Opening Any WhatsApp Attachment
As WhatsApp has become an essential communication tool for both personal and professional use, blindly trusting files—even those sent by friends or colleagues—can be risky. Verifying attachments before opening them remains one of the simplest yet most effective ways to protect yourself against malware and cyber fraud.
Cybersecurity experts recommend treating every unexpected attachment with caution, regardless of who sends it.
If you are a salaried employee contributing to the Employees' Provident Fund (EPF), linking your
EPF Interest Update: Big Relief for PF Subscribers as Regional Offices Directed to Credit Interest
The Employees' Provident Fund Organisation (EPFO) has rolled out key changes to the EPF Scheme 20
Lionel Messi has opened up about his grief following the death of his father, Jorge Messi, in an
Samsung AI Success: Q2 Profit Beats Full-Year 2025 Earnings, Semiconductor Business Drives Growth
Samsung Electronics has projected an operating profit of 89.4 trillion won for the April–Ju
Gold Price Today: Gold Jumps ₹1,440 to ₹1.51 Lakh; Silver Rises ₹1,909 to ₹2.33 Lakh
Gold and silver prices surged on August 10, with both precious metals extending their recent gain
iPhone 18 and iPhone 18e Launch Date Tipped: Major RAM Upgrade and AI Features Expected
While Apple's upcoming iPhone 18 Pro models continue to dominate headlines, fresh leaks suggest t
TCS AI Hiring: After Workforce Cuts, Company Plans to Build Team of Up to 8,900 AI Engineers
Tata Consultancy Services (TCS) is doubling down on Artificial Intelligence (AI) as the technolog
Reliance Power Shares Surge: What’s Driving the Massive Rally After Stock Fell to ₹24?
Reliance Power shares gained around 3% in early trading, touching ₹25.30, after the Anil Ambani
Gold and silver prices remained volatile on Monday, July 6, as global economic uncertainty and sp
Europe Heatwave Crisis: Residents Rush to Buy Cooling Appliances Amid Rising Temperatures
A severe heatwave sweeping across several European countries has sent temperatures soaring, promp
