New Malware Attack Via WhatsApp Attacking Windows System to Enable Remote Access For Attackers

New Malware Attack Via WhatsApp Attacking Windows System to Enable Remote Access For Attackers

A new and active malware campaign is spreading through WhatsApp, targeting everyday Windows users across more than a dozen countries. The threat uses malicious script files disguised as routine financial documents, tricking people into running harmful code on their own machines. Once opened, the file quietly sets off a chain of events that ends with attackers gaining full remote access to the victim’s system. The campaign was first observed in J…

A VBScript campaign distributed through WhatsApp deploying RMM software

In June 2026, we observed a malware campaign distributing malicious VBScript files through direct messages in WhatsApp. The campaign affected users across multiple countries and territories, including Malaysia, Brazil, India, Mexico, Singapore, UK, Spain, Taiwan, Australia, Russia and Vietnam, with the highest number of victims observed in Malaysia. At the time of writing this article, the campaign is still active. Introduction to Malware Binar…