Story perspectives

Microsoft Warns of WhatsApp VBS Malware Campaign Targeting Windows Users

4/2/2026

Summary

Story summary

Microsoft Corporation has identified a campaign that uses WhatsApp to distribute Visual Basic Script (VBS) files.
The campaign began in late February 2026.
Attackers aim to gain remote control of Windows machines with the VBS payload.
The scripts manipulate legitimate Windows tools to download malware from trusted cloud services and disguise activity as normal network traffic.
Users should avoid unsolicited attachments and keep security measures up to date.

1 of 1

Story summary

Microsoft Corporation has identified a campaign that uses WhatsApp to distribute Visual Basic Script (VBS) files.
The campaign began in late February 2026.
Attackers aim to gain remote control of Windows machines with the VBS payload.
The scripts manipulate legitimate Windows tools to download malware from trusted cloud services and disguise activity as normal network traffic.
Users should avoid unsolicited attachments and keep security measures up to date.