Beware of malware targeting computer users via hijacked WhatsApp accounts
Victims could have their personal information stolen.
Singapore residents are urged to be wary of malware spreading through compromised WhatsApp accounts, according to a statement released by the police on November 2nd. This emerging threat targets unsuspecting computer users who open seemingly legitimate file attachments, such as "Invoice 2026-09-15.iso" or "Salary Revision.rar," believing them to be work-related documents.
The scam's origin lies in hacked WhatsApp accounts of the victim's friends, colleagues, or superiors. When recipients in Singapore open these files, malicious software infiltrates their computers undetected, enabling cybercriminals to record keystrokes, capture screenshots, and communicate with external command centers. This surreptitious software can control the victim's computer and allow the attackers to take over their WhatsApp accounts, spreading the malware further or requesting money.
The police have noted an alarming trend of scams accounting for $410.6 million in losses during the first half of 2026 alone, with seniors aged 65 and above bearing the brunt of these fraudulent schemes. To protect themselves, the police recommend enabling two-step verification on WhatsApp, regularly checking for unrecognised devices under "Linked Devices," installing ScamShield, and using banks' "Money Lock" features.
Users should also refrain from opening suspicious attachments, even from known contacts, and verify requests through alternative means, like a phone call. The 24/7 ScamShield Helpline can be reached at 1799 for queries or concerns. For additional scam prevention resources, visit www.scamshield.gov.sg.
Written by urgent.news from Straits Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
