If you haven’t received them, count yourself lucky. In my inbox (shown above), I’ve received a number of “WhatsApp New Voicemail” emails like the one shown, and as the head honcho of the messaging and calling app blog, I figured it was a good thing to look into. I’ve since discovered that it’s an email that’s quite common with all e-mail providers and all users from around the world.
According to Webroot, the attached file regarding so-called voicemail (luckily Outlook doesn’t show them by default when they’re in the junk folder) is a fake that also carries a Trojan downloader, which apparently pulls down more malware via its central command-and-control (C&C) system. Webroot says that this additional malicious program has been detected as Trojan.Win32.Sharik.qhd.
WhatsApp obviously is not behind these emails. In fact, the cybercriminal(s) behind this new WhatsApp trojan campaign also had another where they impersonated T-Mobile, and Sky, attempting to get customers to download the malicious software to their systems.
WhatsApp isn’t the only calling and messaging app to get the Trojan treatment either. Back in July, KakaoTalk users on Android were similarly targeted, and as the popularity of OTT apps increases, it’s very likely that these Trojans will increase as well.
It goes without saying that if you see these types of emails, do not open them. Instead, make sure they’re completely deleted out of your inbox as well as your deleted items folder. Also, it’s always a good idea to make sure your security software on your device is up to date.