WhatsApp Malware Campaign Hijacks Trust, Installs Legitimate Admin Tools

Security Affairs roundup covering multiple high-impact incidents: FortiBleed — an industrial-scale credential-harvesting operation against Fortinet FortiGate VPNs that reportedly targeted 430,000+ devices and harvested ~110M credentials; a Texas Parks & Wildlife (TPWD) breach exposing PII for ~3 million people via a compromised third‑party license vendor; an active WhatsApp malware phishing campaign that hijacks accounts and silently installs legitimate remote‑management/admin tools on victims’ PCs; AryStinger infrastructure that has covertly recruited 4,300+ outdated routers via legacy flaws;