WhatsApp users in Kenya have been warned about malicious files circulating through messaging platforms, with cybercriminals suspected of using infected documents and applications to steal personal and financial information.
The warning follows reports from Malaysia highlighting a cyber threat that could expose millions of WhatsApp users to malware attacks.
According to the report, an estimated 32.3 million WhatsApp users in Malaysia could be vulnerable to cyberattacks involving harmful files designed to infiltrate smartphones and access sensitive information.
The alert was issued by Malaysian Cyber Consumer Association (MCCA) President Siraj Jalil, who raised concerns about criminals exploiting the trust people place in messages and files received from familiar contacts.
Speaking on the sidelines of an event, Siraj explained that cybercriminals were distributing infected documents and application downloads through WhatsApp, making it difficult for unsuspecting users to identify potential threats.
He cautioned that a file should not automatically be considered safe simply because it appears to have been sent by a saved contact.
How WhatsApp malware attacks work
The malicious files may contain Android Application Package (APK) files, Trojan malware or spyware capable of compromising smartphones.
APK files are used to install applications on Android devices. However, criminals can disguise harmful software as legitimate applications or distribute modified versions of popular apps to trick users into installing malware.
Once installed or activated, certain forms of malware can allow attackers to access personal information, monitor phone activities and potentially compromise financial accounts.
Siraj warned that criminals often exploit people’s willingness to trust messages from friends, relatives and other familiar contacts.
“When a file comes from someone familiar, we tend to trust it and open it. That is how malware or Trojan software can spread from one device to another,” he warned.
A compromised smartphone could expose sensitive information, including banking details, one-time passwords (OTPs), transaction authorisation codes and personal documents.
Depending on the malware involved and the permissions granted, criminals may also attempt to carry out unauthorised financial transactions.
Hackers could take over WhatsApp accounts
Beyond stealing personal information, malicious software can potentially be used to compromise WhatsApp accounts.
Attackers may impersonate victims and send fraudulent messages to people in their contact lists, requesting money or sharing additional infected files.
Such attacks can spread quickly because recipients may believe the messages are genuine when they appear to originate from someone they know.
Users are therefore advised to verify unexpected files or application links directly with the sender before opening or downloading them.
How WhatsApp users can protect themselves
Cybersecurity awareness remains important as criminals continue to exploit messaging platforms to distribute malware.
Users can reduce their exposure by taking several precautions:
- Disable automatic downloads: Review WhatsApp storage and media settings to limit the automatic downloading of files.
- Activate two-step verification: Add an extra layer of security to a WhatsApp account.
- Avoid unofficial applications: Do not install APK files from unknown websites or untrusted sources.
- Verify suspicious messages: Contact the sender through another trusted channel if an unexpected file arrives.
- Avoid suspicious links: Do not open unfamiliar links promising free entertainment, prizes or other attractive offers.
- Keep devices updated: Install security updates and use trusted mobile security tools where appropriate.
Users should also avoid sharing OTPs, banking passwords and transaction authorisation codes, even when requested by someone claiming to be a friend or family member.
Warning signs that a phone could be compromised
Some malware infections may operate without obvious signs, but unusual device behaviour can indicate a potential security problem.
Possible warning signs include unexplained battery drainage, overheating, unexpected changes in phone performance and applications malfunctioning without a clear reason.
Users should also be cautious if they experience unexpected verification messages, repeated requests for authentication codes or difficulties receiving SMS messages.
These symptoms do not necessarily prove that a phone has been infected, but they may justify further security checks.
Anyone who suspects their device has been compromised should avoid entering banking credentials, remove suspicious applications where safe to do so, update their device and contact their bank immediately if financial information may have been exposed.
WhatsApp’s growing reach in Kenya
The warning comes as WhatsApp maintains a significant presence among internet users in Kenya.
Estimates cited in local reports place the platform’s Kenyan user base at between 22 million and 26 million. Communications Authority of Kenya data have also been cited as showing substantial national reach for the messaging service.
Its widespread use for personal communication, business transactions and sharing documents makes account security an important concern.
Although the reported malware warning originated in Malaysia, the tactics described are not limited to one country. Kenyan users are also encouraged to exercise caution when receiving unexpected files, particularly APK downloads and applications from unofficial sources.
Ultimately, a message appearing to come from a familiar contact is not a guarantee that its contents are safe. Verifying suspicious files before opening them could help users protect their personal information, WhatsApp accounts and money.
Also Read: Government Compensates Samburu Families with 435 Cattle After Police Operation