CERT-In Warns Users of WhatsApp Web Malware Campaign

The Indian Computer Emergency Response Team (CERT-In) has issued a critical advisory regarding an ongoing malware campaign targeting WhatsApp Web and desktop users. Attackers are reportedly using compromised accounts to distribute malicious attachments, masquerading as legitimate files to deceive unsuspecting users. This campaign poses a significant risk to data privacy and account security across both personal and professional communication environments.

The threat involves the transmission of infected files through chat windows. Even when these files appear to originate from known contacts like colleagues, friends, or family members, CERT-In warns they may contain malicious code. Once opened, these files could potentially allow unauthorized access to the user's system, steal sensitive information, or disrupt local device operations by installing unwanted software.

Users are urged to exercise extreme caution before interacting with any unsolicited or unexpected attachments on WhatsApp platforms. CERT-In suggests verifying the source of suspicious files before clicking or downloading them. This alert comes as organizations and individuals increasingly rely on web-based messaging services for daily operations, making such platforms prime targets for automated cyberattacks seeking to exploit human trust within personal social networks.