WhatsApp Spam Used to Spread Malware

WhatsAppDid you get an email notifying you of a new WhatsApp voicemail?

Think twice before downloading the attached file.

Antivirus firm Webroot warns that cybercriminals are sending out bogus WhatsApp notification emails in hopes of tricking unsuspecting users into downloading malware onto their machines.

You have a new voicemail!


Time of Call: Oct-XX 2013 XX:XX:XX
Length of Call: XX seconds

*If you cannot play, move message to the “Inbox” folder.

Attached to the spam messages, titled “Voice Message Notification/1 New Voicemail” is a file named “Oct-17 2013 voicemail 70043.wav.exe.”

To no surprise, the poorly disguised voicemail file is actually a Trojan horse. Good news is that most antivirus software will be able to detect it, including ESET, Sophos, Malwarebytes, Symantec, Kaspersky, et al.  Just be careful as it slipped by Microsoft Security Essentials.

Should the malware, which Symantec identifies as Trojan.Zbot, make its way onto your computer, it will modify the registry and connect to its command & control server to download and install additional malware.

Did You Get a WhatsApp Spam Email?

If you get a copy of this spam email in your inbox, it is recommended that you:

  • Do not download or open any attached files.
  • Do not click on any embedded hyperlinks.
  • Report the email to Spamcop.
  • Delete the email immediately.
Like this post? Follow us online by liking us on Facebook, following us on Twitter (@thechipmerchant), or circling us on Google+.