{
  "id": 18426930,
  "title": "Malicious WhatsApp ZIP files can steal passwords, banking details, expert warns",
  "url": "https://urgent.news/2026/11/06/malicious-whatsapp-zip-files-can-steal-passwords-banking-details",
  "topic": "world",
  "section": "World",
  "published": "2026-11-06T02:39:05.000Z",
  "source": {
    "name": "New Straits Times",
    "slug": "new-straits-times",
    "url": "https://www.nst.com.my/news/nation/2026/11/1571941/malicious-whatsapp-zip-files-can-steal-passwords-banking-details-expert"
  },
  "original_language": "en",
  "account": "Suspicious ZIP files shared via messaging apps like WhatsApp can expose users to malware that steals passwords, banking details and personal information, according to an expert. Dr Shafiza Mohd Shariff, Deputy Dean (Academic and Technology) at Universiti Kuala Lumpur's Malaysian Institute of Information Technology, explained that this malware could gather data stored on devices, including login credentials, and monitor banking activities. The malicious software can capture users' keystrokes, collect passwords and other login information, access data on their devices, and monitor their activities, particularly financial ones like banking. Attackers might also intercept Transaction Authorisation Code (TAC) numbers if users access apps still using the verification method, allowing them to receive codes without users' knowledge. Many mobile users lack antivirus software, making their devices more susceptible to malicious attachments spread through platforms like WhatsApp and Telegram. Dr Shafiza advised verifying suspicious files with senders and avoiding downloads or opening attachments from unknown sources. She also recommended installing and regularly running antivirus software on mobile devices to detect and quarantine malicious files. On October 29, the Malaysia Computer Emergency Response Team (MyCERT) issued a warning about an ongoing campaign in Malaysia involving malicious files disguised as financial documents, distributed through WhatsApp. These files, masquerading as invoices, statements, and payment documents, instructed recipients to open or extract ZIP attachments, which could install remote-control malware on Windows computers and give attackers control over affected devices. The Malaysian Communications and Multimedia Commission (MCMC) issued a similar advisory on November 4, warning of heightened risks from suspicious ZIP files, attachments, and links shared via WhatsApp. Scammers might pose as trusted individuals to convince recipients to open suspicious files or follow links, potentially leading to malware infections, personal information leaks, unauthorized device or WhatsApp account access, and account takeovers.",
  "summary": "KUALA LUMPUR: Suspicious ZIP files circulated through messaging platforms such as WhatsApp could expose users to malware that steals passwords, banking credentials and personal information, said an expert.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "People Daily Kenya",
        "title": "KRA warns against fake Whatsapp job advert",
        "url": "https://urgent.news/2026/11/05/kra-warns-against-fake-whatsapp-job-advert",
        "published": "2026-11-05T15:08:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}