WhatsApp Attachment Deploys Malware That Gains SYSTEM Access on Windows

A malicious WhatsApp attachment is being used to deploy a Windows remote access trojan that can reach SYSTEM-level access, giving its operators deep control over infected machines. The campaign begins with a ZIP archive carrying a financial-document lure and an executable named Statement.exe. Once the recipient opens the file, the malware starts a long, hidden chain that moves from a user-level process into a Windows service running with LocalSystem rights. The final payload, named VulcanRAT207.A, gives remote operators the ability to collect system data, run commands, manage files, capture screens, record keystrokes, create or change local accounts, and deploy…