The warning highlights malware risks from files shared through WhatsApp.
A Malaysian consumer cyber safety official warns that malicious WhatsApp files can expose personal data, banking details and verification codes.
WhatsApp malware attacks can exploit users’ trust in familiar contacts to steal sensitive information, a Malaysian cyber safety official has warned. The threat involves infected documents and application downloads shared through the messaging service.
Malaysian Cyber Consumer Association (MCCA) President Siraj Jalil raised the alert while speaking on the sidelines of an event. He warned that criminals use familiar contacts to encourage recipients to open harmful files.
How WhatsApp malware attacks exploit trust
Siraj cautioned that a saved contact does not guarantee a file’s safety. Criminals may also use phone numbers that previously belonged to people the recipient knows.
The downloads can include Android Application Package (APK) files carrying malware, as well as Trojans or spyware. Once users open malicious files, attackers can extract personal information and monitor phone activity without their knowledge, he said.
Compromised phones can therefore expose banking details, one-time passwords, transaction authorisation codes and personal documents. Criminals may also gain access to financial accounts and carry out unauthorised transactions.
Siraj further warned that attackers could take control of victims’ WhatsApp accounts and impersonate them. They can then send fraudulent messages to people in those users’ contact lists, extending the threat to others.
Steps users can take to protect their accounts
To reduce exposure, users should disable automatic downloads and activate two-step verification. They should also avoid installing applications from unofficial sources, particularly pirated APK files promising free entertainment.
The warning highlighted unusual battery drain, overheating and malfunctioning phone features as signs users should watch for. Difficulties receiving SMS messages can also signal trouble, especially when repeatedly requested verification codes fail to arrive.
The alert follows an estimate that 32.3 million WhatsApp users in Malaysia could face exposure to malicious-file attacks. Siraj’s warning centres on the risks of trusting downloads simply because they appear to come from someone familiar.
In Kenya, Communications Authority data put WhatsApp’s reach at approximately 53.9 per cent of the population. The platform’s broad use makes file and account security relevant to a large local audience.
