--- title: WhatsApp phishing campaign uses fake voice messages description: A new phishing campaign, which uses fake WhatsApp voice messages to trick victims into installing infostealing malware, has already targeted over 27,000 users. canonical_url: https://www.acronis.com/en/tru/posts/whatsapp-phishing-campaign-uses-fake-voice-messages/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * [Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/) 08 April 2022 # WhatsApp phishing campaign uses fake voice messages A new phishing campaign, which uses fake WhatsApp voice messages to trick victims into installing infostealing malware, has already targeted over 27,000 users. Author: **[Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/)** [Video 1](https://www.youtube.com/watch?v=4zSDUJjStcg) A new phishing campaign, which uses fake WhatsApp voice messages to trick victims into installing infostealing malware, has already targeted over 27,000 users. Targets are sent a malicious email that purports to contain an important voice message. Once the recipient clicks on the “play” button, they're redirected to a web address that begins the installation of a trojan on their machine. This trojan can steal stored credentials from browsers, cryptocurrency wallet contents, and applications like FTP, VPN or SSH clients. Acronis’ [Advanced Email Security pack](https://www.acronis.com/en-us/products/cloud/cyber-protect/email-security/) takes human error out of the equation by ensuring that phishing emails are filtered out before they even reach users' inboxes. Related articles [The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation](https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/) [Acronis AI Copilot: Adoption is high and growing among MSPs](https://www.acronis.com/en/tru/posts/acronis-ai-copilot-adoption-is-high-and-growing-among-msps/) [Acronis Cyberthreats Update, October 2026](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-october-2026/) [AI agents at work: What Acronis endpoint data reveals about MSP and SMB usage](https://www.acronis.com/en/tru/posts/ai-agents-at-work-what-acronis-endpoint-data-reveals-about-msp-and-smb-usage/)