Top News

If you use WhatsApp Web or WhatsApp Desktop, you need to be cautious. The Indian Computer Emergency Response Team (CERT-In) has issued a new cybersecurity alert. According to the agency, cybercriminals are using WhatsApp to send fake invoices, bank statements, and other business documents to install dangerous malware on users' computers. Notably, these files are often sent from the WhatsApp accounts of people you know, leading users to open them without a second thought.

According to CERT-In, this attack primarily targets WhatsApp Desktop and WhatsApp Web users. Hackers first compromise a legitimate WhatsApp account and then use it to send malware-laden files to the account's contacts. Since the message appears to come from a trusted source, the likelihood of the recipient opening it increases significantly.

The report states that this malware is being distributed as Visual Basic Script (.vbs) files. These files are given names like Invoice, Payment Record, Bank Statement, Account Statement, Debt Notice, or Acknowledgement Receipt to avoid raising suspicion. Furthermore, details resembling "Microsoft Windows Update" information are often embedded in these files to make them appear authentic.

If a user inadvertently opens such a file, a script executes on their Windows computer. This triggers the download of other malicious programs and can grant hackers remote access to the system. Such breaches can lead to password theft, data leaks, the installation of additional malware, and compromise of the entire network.

Never open such files
CERT-In advises users never to open unknown or suspicious files received via WhatsApp, especially those with a .vbs extension. Even if a known contact sends such a document, verify it first via a phone call or another communication channel. Additionally, keep your Windows operating system and antivirus software updated, and steer clear of suspicious files. A little caution can protect you from a major cyberattack.

Disclaimer: This content has been sourced and edited from News18 Hindi. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.