WhatsApp phishing attack uses fake business docs to hack PCs

A WhatsApp phishing campaign uses compromised accounts to send VBScript files disguised as business documents. Executing the files installs legitimate ManageEngine Endpoint Central, giving attackers remote system access. The campaign targets users in Brazil, India, Mexico, Singapore, the UK, Spain, Taiwan, Australia, Russia, Vietnam, and Malaysia, with the highest concentration in Malaysia.