Security News > 2022 > April > WhatsApp voice message phishing emails push info-stealing malware
A new WhatsApp phishing campaign impersonating WhatsApp's voice message feature has been discovered, attempting to spread information-stealing malware to at least 27,655 email addresses.
Information-stealing malware is aggressively distributed today via various means, with phishing remaining a primary channel for threat actors.
The new WhatsApp voice message phishing campaign was discovered by researchers at Armoblox, who are constantly on the lookout for new phishing threats.
A timely phishing attack pretends to be a notification from WhatsApp stating that they received a new private message.
Secondly, voice messages received on WhatsApp are downloaded automatically in the client app, so the IM company would never inform you about receiving one via email.
Thirdly, the phishing email features no WhatsApp logo, which is almost certainly to avoid having trouble with the VMC checks introduced by Gmail last year.
News URL
Related news
- Russian Star Blizzard Targets WhatsApp Accounts in New Spear-Phishing Campaign (source)
- Russia's Star Blizzard phishing crew caught targeting WhatsApp accounts (source)
- Phishing Emails Targeting Australian Firms Rise by 30% in 2024 (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Beware: PayPal "New Address" feature abused to send phishing emails (source)