Trust becomes the delivery mechanism

In the reported cases, users opened a file received through messaging and later found that similar files had been sent to their contacts without permission. Executable files and archives are especially risky, but a document name or icon guarantees nothing. The danger is not limited to the messaging account. Malware may access the device, steal credentials, hijack a WhatsApp Web session or observe sensitive activity.

The simplest reflex

If an attachment is unexpected, call the sender or use another known channel. Do not rely only on the potentially compromised conversation. Review devices linked to the account and enable two-step verification. If the file has already been opened, disconnect the device from the network, scan it with reputable security software from a safe environment, warn contacts and monitor accounts. Report unknown transactions immediately to the bank and relevant authorities.

A regional warning, a global risk

The advisory comes from Singapore and reflects regional reports, but the mechanism is universal: a compromised account crosses borders as quickly as its address book.

Conclusion

Seeing a familiar name on screen is no longer sufficient proof. Verification through a second channel, software updates and checking connected sessions offer a simple defence against a campaign that turns each victim into a relay.