IT-company Armorblox spoke about a new phishing campaign that masquerades as a voice messaging feature in the popular messenger. With its help, scammers install malicious software to steal credentials, passwords from wallets, and even files stored on a PC.

Hacking a PC is carried out using a mailing list. The message, disguised as an official message from the messenger’s support service, prompts the user to play a “voice message” – when clicking on the link, the victim is redirected to a phishing site that infects the computer with the JS / Kryptic virus.

In order to “condition” the user to download malicious software, attackers even imitate a form of captcha with the popular inscription “Confirm that you are not a robot.” After pressing the on-screen button, the browser will offer to install a virus under the guise of useful software to optimize the PC, and will also download scripts to display advertisements for various resources.

Representatives of Armorblox note that the authors of the newsletter have nothing in common with the WhatsApp developers. In addition, voice messages in the messenger are downloaded automatically, so the company will never inform the user about the receipt of audio via email. Finally, the phishing email does not contain the WhatsApp logo, which should alert the attentive user.