Update WhatsApp now: Two new flaws could expose you to malicious files
2026-05-05T20:51:56Z•09344bea1d846a7f24a59998e8cf1f144b8559107d98770b5c69daad2c628dda
account-theftcpaneldata-leakexploitfacebookfake-captchaios-bugmalicious-websitemalwarepaypalphantomrpcphishingrobloxscamthreat-intelvulnerabilitywhatsappworld-cup
What happened
Recent Malwarebytes coverage highlights multiple active threats and high-impact vulnerabilities: two new WhatsApp flaws that can expose users to malicious/disguised files; an actively exploited cPanel/WHM bug enabling website takeover; large-scale phishing campaigns (including use of Google AppSheet) stealing Facebook accounts; mass Roblox account theft via fake “game enhancement” installs; PayPal email hijacking to push tech-support scams; and malicious websites (fake TradingView/AI agent) that drop browser takeover malware. The feed also calls out scams tied to the 2026 World Cup, fake-CAPT
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 09344bea1d846a7f24a59998e8cf1f144b8559107d98770b5c69daad2c628dda
- Enrichment time
- 2026-05-05T20:51:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.