New WhatsApp Attacks—Microsoft Shares Critical Warning For Users

Microsoft Defender published a report detailing a WhatsApp-based malware campaign that began on February 26.

The campaign delivers Visual Basic Script files via WhatsApp and uses renamed Windows utilities and cloud-hosted payloads.

Microsoft published enterprise mitigations including blocking script hosts, inspecting cloud traffic, and monitoring persistence indicators.

WhatsApp advised users to open files only from known contacts and noted extra info is shown for first-time messages.

Meta advised some iPhone users to reinstall WhatsApp after a spyware campaign was confirmed.