The Singapore Police Force (SPF) issued an advisory on Monday (2 Nov) about a new variant of malware-enabled scams being spread through WhatsApp.
The scam involves malicious files sent to victims with names that make them look like legitimate work documents. Once opened on a computer, however, the files can install malware capable of stealing personal information.
So far, the police have not received reports of monetary losses linked to this scam variant, although victims’ personal data may have been compromised.
What makes the scam particularly deceptive is that the messages may appear to come from someone familiar.
Scammers first gain control of WhatsApp accounts belonging to victims’ friends, colleagues, or supervisors. They then use these accounts to send files disguised as ordinary work documents.
Examples seen by the police include files named “Invoice 2026-09-15.iso”, “Statement of Account_54d3.zip”, and “Salary Revision.rar”, although other names may also be used.
Source: Singapore Police Force
Recipients are typically told to open the attachment on a computer to view the supposed document. Some were also asked to send the file to their finance managers, potentially exposing more people to the malware.
Those accessing the conversation through WhatsApp Desktop or WhatsApp Web may end up downloading the malicious file directly onto their computers.
Opening one of these files can install malware on the computer without the victim realising what has happened.
Once inside the device, the malware may record keystrokes, take screenshots, and connect to a remote command-and-control server.
Source: Poike from Getty Images Pro on Canva, for illustration purposes only
Scammers have also managed to take control of victims’ WhatsApp accounts in many of the reported cases. The compromised accounts can then be used to send the same malicious files to more contacts, allowing the scam to spread further.
In some instances, scammers have also messaged the account holder’s contacts asking to borrow money.
Victims may not immediately know that their computer or WhatsApp account has been compromised. Some only discover something is wrong after noticing unusual activity on their device or being contacted by people who received suspicious messages from their account.
To reduce the risk of falling victim, the police recommend strengthening the security of both your WhatsApp account and your finances.
WhatsApp users can enable Two-Step Verification under “Settings” > “Account” > “Two-Step Verification”.
It is also worth regularly reviewing the devices logged into your account under “Settings” > “Linked Devices”. Any device you do not recognise should be logged out.
Source: Rahul Shah on Pexels, for illustration purposes only
The police also recommend using the ScamShield app, which can help block scam calls and filter suspicious SMSes.
For additional protection against financial losses, bank customers can consider using Money Lock, which allows them to set aside part of their savings so it cannot be transferred digitally.
Even if a WhatsApp attachment appears to have come from someone you know, avoid opening it if you were not expecting the file.
Instead, contact the sender separately, such as by calling them, to confirm that they really sent the message.
Those who are unsure whether something may be a scam can also check with ScamShield or call the 24/7 ScamShield Helpline at 1799.
Anyone who believes they may have fallen victim to a scam should contact their bank as soon as possible to stop or block unauthorised transactions, and make a police report.
The police also encourage people to alert their family and friends about scam encounters, which may help prevent others from falling for similar tactics.
For more information and advice on scams, visit the ScamShield website. Those who are unsure about a suspicious message or request can also call the ScamShield Helpline at 1799.
Also read: Police warns about scammers impersonating popular investors & financial personalities on Facebook
Have news you must share? Get in touch with us via email at news@mustsharenews.com.
Featured image adapted from Brett Jordan on Pexels and the Singapore Police Force.