Malware uses WhatsApp to send infected files to a victim’s contacts
A harmful program is hijacking people’s WhatsApp Web accounts to send fake but believable messages and infected ZIP files to their contacts. Because the messages appear to come from someone you know, friends, family, and coworkers may be more likely to open them and spread the problem further.
Who is at risk
Anyone who uses WhatsApp Web, or receives unexpected files or unusual messages from a known contact on WhatsApp, is at higher risk.
What to watch for
Watch for unexpected messages from people you know that urge you to open a ZIP file, click something quickly, or seem out of character for that person.
What to do
If you receive a suspicious WhatsApp message or file, do not open it, confirm with the sender through another method, and log out of WhatsApp Web sessions you do not recognize.