WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

Summary

Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script (VBScript) files that lead to the installation of legitimate Remote Monitoring and Management (RMM) software. Per findings from Kaspersky, the active campaign is targeting users of WhatsApp Desktop and WhatsApp Web across Malaysia, Brazil, India, Mexico, Singapore, the U.K., Spain, Taiwan, Australia,

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.