Microsoft has observed a malware campaign in which attackers send VBS files (Visual Basic Script) in WhatsApp messages. If victims execute them, it triggers a multi-stage infection chain, at the end ...

Microsoft Defender Experts observed a campaign beginning in late February 2026 that uses WhatsApp messages to deliver malicious Visual Basic Script (VBS) files. Once executed, these scripts initiate a ...