The attack functions by quietly installing background malware once a recipient opens an attachment sent from a trusted contact's hijacked profile. Once inside, the malicious program records keystrokes, takes screenshots, communicates with external servers, and allows perpetrators to manipulate the computer remotely. Although no direct monetary losses have emerged from this particular variant yet, scammers are actively exploiting compromised accounts to impersonate users and solicit funds. To counter the threat, authorities recommend enabling two-step verification, auditing linked devices, installing ScamShield, and independently verifying sudden document requests.
Key points
Hackers exploit existing professional relationships by hijacking authentic accounts belon…: Hackers exploit existing professional relationships by hijacking authentic accounts belonging to colleagues, bosses, and friends.
Infected devices grant attackers remote control to harvest personal information and sprea…: Infected devices grant attackers remote control to harvest personal information and spread malware to other contacts without authorization.
Users must protect themselves by enabling two-step verification, disconnecting unauthoriz…: Users must protect themselves by enabling two-step verification, disconnecting unauthorized linked devices, and verifying unexpected files via separate communication channels.
Sources checked by our analysis pipeline: 1
- Police warned of a WhatsApp scam that uses hacked friends' and bosses' accounts to send fake work files to computer users. Victims are told to open attachments on WhatsApp Desktop or Web, which installs malware.
- The malware can record keystrokes, take screenshots, and let hackers control computers. It can also take over WhatsApp accounts and send the same scam to other contacts or ask for money.
- No money loss has been reported yet, but victims risk stolen personal data. Police urged people to use two-step verification, check linked devices, install ScamShield, and verify unexpected files first.
AI generated
SINGAPORE – Be on the alert for scams circulating on WhatsApp where computers are targeted via hijacked accounts belonging to friends, colleagues and bosses.
While no money has been reported lost to the scam yet, victims risk having their personal information stolen, the police warned in a statement on Nov 2.
In this scam variant, victims would receive seemingly legitimate or work-related file attachments – under file names such as “Invoice 2026-09-15.iso”, “Statement of Account_54d3.zip” or “Salary Revision.rar” –…
The Chinese technology firm shared these hardware supply plans directly with select customers ahead of the new product release. Relying on components from the two South Korean suppliers signals the memory architecture intended for the forthcoming advanced system. Broader launch timelines and detailed specifications for the equipment have not yet been made public.
Bug bounty programs are increasing rewards for defenders. These larger payouts aim to further incentivize individuals who identify and report vulnerabilities to protect systems.
The platform has eliminated its manual allowlisting process, opening access so any external client can initiate connection requests directly. Instead of waiting for platform evaluation, developers supply self-hosted identity records to handle authentication according to updated standard specifications. Users retain full oversight by reviewing and approving every incoming request through updated contextual consent prompts.