A new phishing attack has emerged. Fraudsters use a fake feature for WhatsApp voice messages to send malware. Users receive an email notification from WhatsApp about a new voice message.

The victim goes through several stages:

First, the user receives an email purporting to be from WhatsApp about receiving a new voice message. It has a Play button and an audio track. The sender himself disguises himself as Whatsapp Notifier, but uses the email address of the Center for Road Safety of the Moscow Region. Because of this, the letter is not blocked by security means, and because the address is genuine.

When clicking "Play", the user is sent to a site with a JS/Kryptic trojan. He allegedly must confirm that he is not a robot and click on the "Allow" button. After that, malware is loaded into the system.

The fraudulent scheme was found by the information security company Armorblox. According to them, the malware was sent to at least 27,655 email addresses.

bbabo.Net