Technology · Singapore Bureau
Cybersecurity Alert: Malware Spreads Via Compromised WhatsApp Accounts
Security researchers warn of a growing threat targeting messaging app users across the region. Compromised accounts are being weaponized to distribute malicious software that harvests personal data from victims.
LSN Singapore ·
Cybersecurity experts have flagged an escalating campaign exploiting hijacked WhatsApp accounts to distribute malware across South and Southeast Asia. The attack vector leverages trusted contacts and existing message threads to increase the likelihood victims will click on malicious links, security analysts say.
Victims whose accounts have been compromised face the risk of significant personal information theft, including contact lists, financial data, and authentication credentials. Once infected, devices can be remotely monitored and controlled by attackers, security researchers warn.
The malware distribution method capitalizes on the messaging platform's widespread adoption and the inherent trust users place in communications from established contacts. Attackers gain initial access to accounts through credential theft, phishing campaigns, or session hijacking before repurposing them for malware distribution.
Security experts recommend users enable two-factor authentication on all messaging accounts, exercise caution when clicking links from contacts, and maintain updated antivirus software. Users who suspect account compromise should immediately change passwords and review active sessions for unauthorized access.