Kerala Police Warn Businesses of WhatsApp Malware Fraud Targeting Finance Teams

Thiruvananthapuram: Kerala Police have flagged a new type of cyber financial fraud spreading across the state, targeting business establishments and their finance departments via WhatsApp. The fraud uses hacked WhatsApp accounts of regular customers or suppliers to send malicious script files — with dangerous extensions such as .vbs — disguised as "account statements" to the accounts department of targeted firms.

Once opened, these files install malware on the company's computers, giving fraudsters full remote control. They then steal passwords saved in browsers along with financial information, hijack the WhatsApp accounts of senior officials, create fake chats in their names and siphon off money. Since the messages appear to come from trusted contacts, businesses are highly vulnerable to transferring large sums before realising they have been deceived. The infected computers also automatically forward these malicious files to other business groups in their contacts.

Police have advised businesses and the public to take strict precautions. Before opening any account statement or file received on WhatsApp, call the sender directly to verify. Never download or run documents with unfamiliar links or unusual file extensions. Do not make financial transactions based solely on WhatsApp messages without official confirmation.

If malware infection is suspected, immediately disconnect the device from the internet entirely, and do not forward the suspect files to other computers or phones for examination. Contact the nearest cyber police station urgently to secure infected devices. Victims should report the fraud immediately on the helpline number 1930 or through cybercrime.gov.in.