WhatsApp on Windows Users Targeted in New Campaign, Warns Microsoft

Microsoft has identified a campaign targeting WhatsApp users on Windows by tricking them into opening an attachment that looks harmless but is actually a Visual Basic script. If the victim runs it, the script uses legitimate Windows tools to hide its activity, download more malicious files from well-known cloud services, and work toward giving the attacker remote access to the computer.

This is a social engineering attack, not a software flaw in WhatsApp itself, which makes user caution especially important.

How to Stay Protected

  • Check file extensions carefully before opening any attachment.
  • Avoid opening unsolicited attachments, even if they appear to come from a known contact.
  • Keep your security software and Windows up to date.
  • Treat unexpected admin prompts or suspicious system changes as warning signs.

Recent news