WhatsApp users lured in by malware

Free messaging app service users are frequently targeted by malicious campaigns, according to research

Criminals distributing malware are targeting WhatsApp users, security researchers have discovered.

The malware is being distributed in emails appearing to be from WhatsApp and these messages are being sent out in bulk, attempting to target as many users as possible, Comodo has revealed.

The most common emails sent to users are being disguised as notifications from the company that a user has missed a call or has received audio recording they haven't listened to. Users are alsp being sent other notifications too, including a video note, so WhatsApp users must be vigilant, the company said.

Advertisement - Article continues below

These emails do not come from a WhatsApp email address, even though they are clearly branded as so, making it easier to identify as fraudulent, Comodo added.

The malware itself appears as an email attachment and encourages the user to download it in order to listen to their message or view the missed calls/messages.

A variant of the Nivdort family of malware, the virus replicates itself into a number of the computer's system folders and installing as an auto-run file in the computer's registry.

"Cyber criminals are becoming more and more like marketers trying to use creative subject lines to have unsuspecting emails be clicked and opened to spread malware," said Fatih Orhan, director of technology for Comodo and the Comodo Antispam Labs.

Advertisement
Advertisement - Article continues below

"As a company, Comodo is working diligently in creating innovative technology solutions that stay a step ahead of the cyber criminals, protect and secure endpoints, and keep enterprises and IT environments safe."

Featured Resources

Key considerations for implementing secure telework at scale

Identifying the security risks and advanced requirements of a remote workforce

Download now

The State of Salesforce 2020

Your guide to getting the most from Salesforce

Download now

Fast, flexible and compliant e-signatures for global businesses

Be at the forefront of digital transformation with electronic signatures

Download now

Rethink your cybersecurity strategy for the new world

5 steps to secure the enterprise and be fit for a flexible future

Download now
Advertisement

Recommended

Malware attacks using machine identities doubled in 2019
cyber security

Malware attacks using machine identities doubled in 2019

4 Aug 2020
Andrew Daniels joins Druva as CIO and CISO
Cloud

Andrew Daniels joins Druva as CIO and CISO

22 Jul 2020
Over two dozen Android apps found stealing user data
Google Android

Over two dozen Android apps found stealing user data

7 Jul 2020
University of California gets fleeced by hackers for $1.14 million
ransomware

University of California gets fleeced by hackers for $1.14 million

30 Jun 2020

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

3 Aug 2020
How to use Chromecast without Wi-Fi
Mobile

How to use Chromecast without Wi-Fi

4 Aug 2020
UN report points to a 350% rise in phishing websites at start of 2020
phishing

UN report points to a 350% rise in phishing websites at start of 2020

7 Aug 2020