A new phishing campaign has been found by the researchers.
The Armorblox research team discovered a Whatsapp Voice Message phishing attack.
This phishing attackspoofed voice message notificationson multiple customer tenants of Office 365 and Google Workspace.
Whatsapp voice message attack spread information-stealing malware to at least 27,655 email addresses.
The email asks the victim to go for the Play button to view the message.
The victim received an email from a valid domain and bypassed the Microsoft and Google email security.
When the victim opens the page, they are asked to confirm that no robots option.
If you press allow, the malware will steal sensitive information.
The acctakers spoofed the popular messaging app and attempted to build trust by sending voicemail.
So, you gotta beware as Whatsapp does not send any notification emails.
If you get an email, we recommend you to avoid opening it to be safe.
