New Malware Attack Via WhatsApp Attacking Windows System to Enable Remote Access For Attackers

## Executive Summary: A widespread WhatsApp-based malware campaign observed since June 2026 distributes malicious VBScript attachments that silently download and install a pre-configured ManageEngine Endpoint Central agent on Windows systems, granting attackers persistent remote access; victims span more than a dozen countries (notably Malaysia), and the report provides extensive IoCs (IPs, domains, MD5 hashes) and low-confidence attribution to a Chinese-speaking operator.