CyberSum logo
Back

WhatsApp Malware Spreads Rapidly on Windows Systems

Cyber Security News by CyberSum.net
2 sources
A new self-propagating malware, codenamed SORVEPOTEL, is targeting users through the popular messaging app WhatsApp. The campaign spreads via phishing messages containing malicious ZIP files, primarily affecting Windows systems in a specific country. Engineered for rapid propagation rather than data theft, the malware hijacks the desktop version of WhatsApp to spam all of the user's contacts and groups. This automated spreading often results in the compromised account being banned for violating the platform's terms of service. The attack begins with a message from an already compromised contact, lending it credibility to trick users into opening the malicious attachment.

Also Read

AI Browser Flaw 'CometJacking' Steals Sensitive Data

A new attack method called CometJacking targets agentic AI browsers by embedding malicious prompts within a single URL. When a user clicks the crafted link, it secretly instructs the AI agent to access and collect sensitive data from connected services like email and calendars. The attack bypasses built-in security protections by obfuscating the stolen data using simple encoding before exfiltrating it to an attacker-controlled server. This prompt injection technique effectively turns the trusted AI assistant into an insider threat, capable of siphoning information without requiring credentials or further user interaction. Despite researchers demonstrating the risk, the AI browser's developer reportedly dismissed the findings as having no security impact.

By Cyber Security News by CyberSum.net