← 返回新闻首页

Beware of malware targeting computer users via hijacked WhatsApp accounts

WhatsApp malware scam targets computer users via hijacked accounts, with police warning of stolen data and fake work file attachments. Read more at straitstimes.com.

The Straits TimesRebekah Chia2026-11-03 10:36查看原文 ↗

Victims would receive messages from compromised WhatsApp accounts belonging to friends, colleagues or bosses.

PHOTO: SINGAPORE POLICE FORCE

Published Nov 03, 2026, 10:36 AM

Updated Nov 03, 2026, 10:36 AM

Police warned of a WhatsApp scam that uses hacked friends' and bosses' accounts to send fake work files to computer users. Victims are told to open attachments on WhatsApp Desktop or Web, which installs malware.

The malware can record keystrokes, take screenshots, and let hackers control computers. It can also take over WhatsApp accounts and send the same scam to other contacts or ask for money.

No money loss has been reported yet, but victims risk stolen personal data. Police urged people to use two-step verification, check linked devices, install ScamShield, and verify unexpected files first.

SINGAPORE – Be on the alert for scams circulating on WhatsApp where computers are targeted via hijacked accounts belonging to friends, colleagues and bosses.

While no money has been reported lost to the scam yet, victims risk having their personal information stolen, the police warned in a statement on Nov 2.

In this scam variant, victims would receive seemingly legitimate or work-related file attachments – under file names such as “Invoice 2026-09-15.iso”, “Statement of Account_54d3.zip” or “Salary Revision.rar” – from contacts whose WhatsApp accounts had already been hacked.

The recipients would be told to open the files on a computer, typically under the pretext of reviewing work documents, or asked to forward them to finance managers.

Those using WhatsApp Desktop or Whatsapp Web who fell for the ruse would end up downloading the malware directly onto their computers.

Once the file was opened, the malicious software would be installed in the background and be able to record keystrokes, take screenshots, as well as communicate with external hacker servers, essentially giving fraudsters the ability to control the victims’ computers.

These cyber attackers would then take over the victims’ WhatsApp accounts to distribute the same malware to other contacts or ask for money under the guise of borrowing funds.

Victims would only discover the breach after noticing abnormal behaviour on their device, or getting alerts from their WhatsApp contacts who received suspicious messages from them, the police said.

Scams remain the dominant crime type in Singapore, with $410.6 million lost to these ruses in the first half of 2026 alone.

Eight in 10 victims are still being manipulated into handing funds over to scammers, with seniors aged 65 and above suffering the highest losses on average across all age groups, police statistics show.

The public is urged by the police to enable two-step verification on WhatsApp, routinely disconnect unrecognised devices under “Linked Devices”, install ScamShield, and use bank “Money Lock” features.

Refrain from opening unexpected attachments, even from known contacts, without verifying the request via a phone call or separate channel first, the police said.

Anyone with doubts or scam-related queries should call the 24/7 ScamShield Helpline on 1799.

For more information on scams, go to www.scamshield.gov.sg

Internet crimes and scams

受害者会收到来自朋友、同事或老板被盗用的 WhatsApp 帐户的消息。

照片：新加坡警察部队

发布于 2026 年 11 月 3 日上午 10:36

更新于2026年11月3日上午10:36

警方警告称，一种利用WhatsApp进行诈骗的分子会盗用朋友或老板的账户，向电脑用户发送虚假工作文件。受害者被诱导在WhatsApp桌面版或网页版上打开附件，从而安装恶意软件。

这种恶意软件可以记录键盘输入、截取屏幕截图，并让黑客控制电脑。它还可以接管 WhatsApp 账户，向其他联系人发送同样的诈骗信息或索要钱财。

目前尚未收到金钱损失报告，但受害者面临个人数据被盗的风险。警方敦促民众启用双重验证、检查已关联的设备、安装 ScamShield 防诈骗软件，并先验证来路不明的文件。

新加坡——请警惕WhatsApp上流传的诈骗，不法分子通过劫持朋友、同事和老板的账户来攻击电脑。

虽然目前还没有人因这起骗局蒙受金钱损失，但警方在 11 月 2 日的一份声明中警告说，受害者的个人信息可能会被盗。