WhatsApp fake invoice scam targets Brazilian businesses and residents

Kaspersky has uncovered a widespread fraud scheme that uses WhatsApp messages bearing fake invoices or payment requests to infect corporate computers. The malicious attachments are VBScripts that, once opened, install malware giving attackers full remote control of the device. The operation appears coordinated across multiple regions, with cases reported in Singapore, Taiwan, Vietnam, Malaysia and several European countries, while the primary impact is in Brazil.

In the Brazilian town of Barroso, criminals have been impersonating acquaintances on WhatsApp, asking victims for "trusted contacts" to keep an online listing active. The ploy has already resulted in financial losses, such as a resident who lost about R$ 300 after providing personal data. Authorities advise individuals not to share personal or banking information, to verify any invoices through independent channels, and to block suspicious numbers.

Security experts recommend blocking executable file extensions (e.g., .vbs, .exe) and using robust security solutions to detect unusual activity on devices.