Malware Spread via Hijacked WhatsApp Accounts Targeting Computer Users

• •Malware is spread via hijacked WhatsApp accounts of known contacts.
• •Victims are tricked into opening malicious attachments disguised as work files.
• •Police recommend enabling two-step verification and verifying unexpected files.

Police in Singapore have issued a warning about a new scam involving malware that is spread through hijacked WhatsApp accounts of friends and colleagues. Victims receive messages with attachments disguised as work files, which they are instructed to open on their computers. Once opened, the malware can record keystrokes, take screenshots, and allow hackers to control the infected devices. Although no financial losses have been reported yet, personal data theft is a significant risk. The police recommend enabling two-step verification, checking linked devices, and verifying unexpected files before opening them. The Singapore Cyber Emergency Response Team (SingCERT) has also advised against opening attachments from known contacts without verification. The scam has been linked to a broader trend of increasing scams in Singapore, with significant financial losses reported in the first half of 2026.