Sunday, April 27, 2025
HomeMobile AttacksCritical Update - Whatsapp malware targets Indian Android Users -Attacking vectors PDF,...

Critical Update – Whatsapp malware targets Indian Android Users -Attacking vectors PDF, DOC, XLS

Published on

SIEM as a Service

Follow Us on Google News

Whatsapp malware targets Indian Android Users, a warning issued by Central security services.

This malware spreads through true looking word records sent by means of WhatsApp, which could then take delicate data from clients, including internet banking credentials and other Sensitive data.

Identified malicious WhatsApp messages

Hackers are taking advantage of two major associations in the district to trick clients to tap on the message attachment.

- Advertisement - Google News

So for identified malicious WhatsApp messages contain names of major organizations in India

  1. NDA (National Defense Academy) “NDA-ranked-8th-toughest-College-in-the-world-to-get-into.xls”

  2. NIA (National Investigation Agency) “NIA-selection-order-.xls”

Behaviour and targeted Audience

Once downloaded, the corrupt files hack into the phone’s system and steal the user’s personal information, passwords, login accounts and banking data.

The malware is most formatted as an Excel document, but officials said it could also appear in Word or Pdf formats.

The primary focus of the malware has been the Indian defense, paramilitary and police forces.

“As these two organizations are very popular and known within the country and abroad and there is a curiosity about them, it is possible that it may affect the mobile phones of people interested in these subjects,” officials told the Economic Times.

Whatsapp has not commented about malware or security measures to prevent circulation.It’s unclear at this time what else this virus does on a phone or tablet.

Preventive Method

As usual, the ideal approach to make sure your information is to avoid from tapping on questionable connections, regardless of how you get them, and limit app use to applications downloaded from authority application stores.

If you accidentally clicked on the Malware disable the Internet Connection immediately.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

How To Use Digital Forensics To Strengthen Your Organization’s Cybersecurity Posture

Digital forensics has become a cornerstone of modern cybersecurity strategies, moving beyond its traditional...

Building A Strong Compliance Framework: A CISO’s Guide To Meeting Regulatory Requirements

In the current digital landscape, Chief Information Security Officers (CISOs) are under mounting pressure...

Two Systemic Jailbreaks Uncovered, Exposing Widespread Vulnerabilities in Generative AI Models

Two significant security vulnerabilities in generative AI systems have been discovered, allowing attackers to...

New AI-Generated ‘TikDocs’ Exploits Trust in the Medical Profession to Drive Sales

AI-generated medical scams across TikTok and Instagram, where deepfake avatars pose as healthcare professionals...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

MediaTek Releases Security Patch to Fix Vulnerabilities in Mobile and IoT Devices

MediaTek, a prominent semiconductor company specializing in mobile, IoT, and multimedia chipsets, has announced...

CISA Released Secure Mobile Communication Best Practices – 2025

The Cybersecurity and Infrastructure Security Agency (CISA) has released new best practice guidance to...

Ghost Tap Attack, Hackers Stolen Credit Card Linked To Google Pay Or Apple Pay

Threat actors are exploiting a new cash-out tactic called "Ghost Tap" to siphon funds...