WhatsApp malware campaign delivers VBScript and MSI backdoors

Reported 31 Mar 2026 by otx · Severity: medium

A sophisticated malware campaign targeting WhatsApp users has been observed since February 2026. The attack chain begins with malicious Visual Basic Script files sent via WhatsApp messages, which, when executed, initiate a multi-stage infection process. The malware uses renamed W