Skip to content
WhatsApp Users Warned Over Files That Could Steal Personal and Banking Details

WhatsApp Users Warned Over Files That Could Steal Personal and Banking Details

Kenyans.Co.Ke • November 8, 2026

WhatsApp users across the country are at risk of malware attacks after a new scam targeting millions of Malaysian users was brought to light.

This came after a report estimating that 32.3 million WhatsApp users in Malaysia could be exposed to cyberattacks involving malicious files designed to infiltrate smartphones and steal sensitive information.

The warning was issued by Malaysian Cyber Consumer Association (MCCA) President Siraj Jalil, who highlighted the growing risks associated with files shared through WhatsApp.

Speaking on the sidelines of an event, Siraj explained that cybercriminals were exploiting people's trust in familiar contacts to distribute infected documents and application downloads.

He cautioned that even files that appear to come from saved contacts could be dangerous, especially when criminals continue to use numbers that previously belonged to acquaintances.

The malicious files may contain Android Application Package (APK) files, Trojan malware or spyware, which can compromise devices without users realising what happened.

Siraj explained that once opened, the files can allow hackers to extract personal information, monitor phone activities and potentially access financial accounts without the owner's knowledge.

"When a file comes from someone familiar, we tend to trust it and open it. That is how malware or Trojan software can spread from one device to another," Siraj warned.

The implications for unsuspecting users are that, once opened, the compromised devices could expose banking details, one-time passwords (OTPs), transaction authorisation codes, and personal documents, while allowing criminals to conduct unauthorised financial transactions.

Siraj also warned that hackers could take over victims' WhatsApp accounts, impersonate them and target people in their lists using fraudulent messages.

To counter this, users are urged to disable automatic downloads, activate two-step verification, and avoid installing applications from unofficial sources, particularly pirated APK files that promise free entertainment.

Other warning signs include unusual battery drainage, overheating, malfunctioning phone features, and difficulties receiving SMS messages, especially when repeatedly requested verification codes fail to arrive.

The new scam comes to light as Meta enjoys a significant user base, estimated at between 22 million and 26 million, while Communications Authority of Kenya (CA) data show the platform reaches approximately 53.9 per cent of the population.

WhatsApp Users Warned of Malware Attacks Through Files From Trusted Contacts

WhatsApp Users Warned of Malware Attacks Through Files From Trusted Contacts

Ministry Hints at Man United vs Arsenal Friendly in Nairobi in 2027

Ministry Hints at Man United vs Arsenal Friendly in Nairobi in 2027

Deaths Reported as Lorries Collide, Burst into Flames Along Busy Highway

Deaths Reported as Lorries Collide, Burst into Flames Along Busy Highway

Patients Transferred as Level 4 Hospital Develops Large Cracks Months After Commissioning

Patients Transferred as Level 4 Hospital Develops Large Cracks Months After Commissioning

Ruto Announces Dualling of Major Highway Connecting Seven Counties

Ruto Announces Dualling of Major Highway Connecting Seven Counties

Foreigners Arrested as Police Seize Substances worth Ksh3.6 Billion

Foreigners Arrested as Police Seize Substances worth Ksh3.6 Billion

State Issues 30-Day Notice as TV Stations, Radio Operator Seek New Licences

State Issues 30-Day Notice as TV Stations, Radio Operator Seek New Licences

DCI Raises Alarm Over Airbnb Scam Targeting December Holidaymakers

DCI Raises Alarm Over Airbnb Scam Targeting December Holidaymakers

Nairobi Water Announces 24-Hour Shutdown Affecting Several Estates

Nairobi Water Announces 24-Hour Shutdown Affecting Several Estates

DCI Intercepts Suspected Car Theft Syndicate in Nanyuki, Recover Stolen Car

DCI Intercepts Suspected Car Theft Syndicate in Nanyuki, Recover Stolen Car

Explained: Rules Foreigners Must Follow When Buying Land and Property in Kenya

Explained: Rules Foreigners Must Follow When Buying Land and Property in Kenya

PSV Operator Issues Notice to Passengers after Motorists Spend Night on Nairobi-Nakuru Highway

PSV Operator Issues Notice to Passengers after Motorists Spend Night on Nairobi-Nakuru Highway

Extracted Entities

Attack Types (1)

Countries (2)

Platforms (2)