A strange invoice, statement or payment file arriving from a known WhatsApp contact may still be malicious. CERT-In’s 25 June 2026 alert documented a campaign in which compromised WhatsApp accounts sent malicious VBScript attachments to existing contacts through WhatsApp Web/Desktop. Opening the file could trigger additional scripts, install remote-management software and expose the endpoint to credential theft, data exfiltration and lateral movement. This guide explains immediate isolation, sender verification, browser/session revocation, enterprise incident response, forensic imaging, eviden
{ "@context": "https://schema.org", "@type": "Article", "headline": "A Known Contact Sent Me a Strange File on WhatsApp Web/Desktop: Can a Trusted Account Spread Malware? CERT-In June 2026 Guide", "description": "A detailed India guide to CERT-In's June 2026 WhatsApp Web/Desktop malware campaign involving compromised contacts, malicious VBS attachments, RMM…