WhatsApp on Windows Users Targeted in New Campaign, Warns Microsoft
Microsoft has identified a campaign targeting WhatsApp users on Windows by tricking them into opening an attachment that looks harmless but is actually a Visual Basic script. If the victim runs it, the script uses legitimate Windows tools to hide its activity, download more malicious files from well-known cloud services, and work toward giving the attacker remote access to the computer.
This is a social engineering attack, not a software flaw in WhatsApp itself, which makes user caution especially important.
How to Stay Protected
- Check file extensions carefully before opening any attachment.
- Avoid opening unsolicited attachments, even if they appear to come from a known contact.
- Keep your security software and Windows up to date.
- Treat unexpected admin prompts or suspicious system changes as warning signs.

