WhatsApp Phishing Campaign Unleashes Malware Storm

[frogboy]

Content source

http://www.infosecurity-magazine.com/news/whatsapp-phishing-campaign-malware/

A malware attack targeted specifically at businesses and consumers who might use WhatsApp has been found unleashed in the wild.

According to the Comodo Antispam Labs (CASL) team, as part of a random phishing campaign, cyber-criminals are sending fake emails claiming to be delivering legitimate WhatsApp content; instead, the messages spread malware when the target clicks on the “message.”

The attachment contains a compressed (.zip) file, which houses a malware executable. The malware is a variant of the Nivdort family, which usually replicates itself into different system folders, adding itself into an auto-run in the computer’s registry.

WhatsApp is a Facebook-owned, multi-platform messaging service that offers chat and calling among users; they can also share photos and videos. The service has 700 million active users and claims 30 billion messages sent each day on the platform, making it a broad target.

But rather than take a scattershot approach to the opportunity, a series of savvy subject line lures are at the core of this campaign.

Full article. WhatsApp Phishing Campaign Unleashes Malware Storm