MyCERT is now issuing a warning to users in Malaysia to be careful when accessing files received via WhatsApp, especially WhatsApp Web and WhatsApp Desktop. MyCERT said there are irresponsible parties targeting local users by sending VBS-formatted files to WhatsApp users. The file will run automatically if opened using WhatsApp Desktop or WhatsApp Web when using the Windows operating system.
Scammers and hackers are getting sneakier these days
For your information, the attackers used different file names when sending them to users, including the file names "Sila Semak Bil Anda.vbs" and "Statement of Account.vbs". If the user opens the file on a Windows computer, it will carry out the infection process and provide remote access to the attacker, in addition to allowing several information inputs through the infected computer to be exposed to the attacker.
Moreover, MyCERT reminded everyone not to download or run files received from unknown parties, or in VBS format, on your computer. If your device has been infected, disconnect the device's internet connection, then change your account password on another device.
You might want to switch off the “Auto-download” feature
Personally, we advise everyone in Malaysia to exercise caution when receiving or accessing any files you receive online, regardless of the medium. If you are active on WhatsApp, you might want to switch off the “Auto-download” feature. After all, it’s better to be safe than sorry. What are your thoughts on the news? Feel free to leave your comments below.
Stay tuned to TechNave.com for more updates like this.
COMMENTS