Security researchers from Trend Micro have discovered fake WhatsApp scam emails that target users to distribute malware. Attack is multi-platform and affects users on Java, Android and iOS devices.
In this attack, cyber criminals send fake WhatsApp email. It informs recipients that a new voice mail has been received. It also has a Play Button to listen voice mail. Once the play button it clicks, it takes users to a malicious website. The website informs users that they are on older browser. In order to listen the voice mail, update the browser. If user tries to update browser with the given update button, website installs a malicious jar file. This jar file is designed for Java mobile phone users. If users is on Android device, it installs a fake APK file. On iOS, this attack seems to be failed. As the installation is blocked by the iOS system’s restriction. But Jailbroken devices are on the risk.
Installed malicious file try to send text messages to specific phone numbers. Malware also try to convince users to download another app on your device. Another app will also do similar kind of tasks.
If you are getting any emails claiming to come from WhatsApp, delete it. Users are also advised to update their Antivirus.
Image and new source: Trend Micro
