A VBScript campaign distributed through WhatsApp deploying RMM software (opens in new tab)

In June 2026, we observed a malware campaign distributing malicious VBScript files through direct messages in WhatsApp. The campaign affected users across multiple countries and territories, including Malaysia, Brazil, India, Mexico, Singapore, UK, Spain, Taiwan, Australia, Russia and Vietnam, with the highest number of victims observed in Malaysia. At the time of writing this article, the campaign is still active. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your s...