Security News > 2022 > April > WhatsApp voice message phishing emails push info-stealing malware
A new WhatsApp phishing campaign impersonating WhatsApp's voice message feature has been discovered, attempting to spread information-stealing malware to at least 27,655 email addresses.
Information-stealing malware is aggressively distributed today via various means, with phishing remaining a primary channel for threat actors.
The new WhatsApp voice message phishing campaign was discovered by researchers at Armoblox, who are constantly on the lookout for new phishing threats.
A timely phishing attack pretends to be a notification from WhatsApp stating that they received a new private message.
Secondly, voice messages received on WhatsApp are downloaded automatically in the client app, so the IM company would never inform you about receiving one via email.
Thirdly, the phishing email features no WhatsApp logo, which is almost certainly to avoid having trouble with the VMC checks introduced by Gmail last year.
News URL
Related news
- Google now blocks spoofed emails for better phishing protection (source)
- New Phishing Campaign Targets Oil & Gas with Evolved Data-Stealing Malware (source)
- Attackers Using Obfuscation Tools to Deliver Multi-Stage Malware via Invoice Phishing (source)
- Millions of Docker repos found pushing malware, phishing sites (source)