Anyone else worried about malware campaigns moving from email straight into WhatsApp?

Been seeing a lot of discussion about phishing-resistant MFA, email filtering, and endpoint protection lately, but this campaign caught my attention because it skips email entirely.

Kaspersky researchers found an active operation using compromised WhatsApp accounts to send malicious VBScript files directly to contacts. The messages reportedly contain nothing except the attachment itself, often disguised as something routine like "Financial Reports" or "Account Statement."

Once opened, the infection chain downloads additional payloads and ultimately installs a preconfigured ManageEngine Endpoint Central RMM agent. That's a legitimate remote monitoring and management tool, which can make detection more challenging because attackers are abusing software that many organizations already recognize and trust.

What's also interesting is the scale. Victims have been identified across multiple countries, including Malaysia, India, Brazil, Mexico, the U.K., Spain, Australia, Taiwan, Russia, and Vietnam. Kaspersky noted that around 80% of observed victims were located in Malaysia.

Researchers also found infrastructure overlaps with activity linked to ValleyRAT and Gh0st RAT operations. While attribution remains uncertain, they assessed with low confidence that a Chinese-speaking operator may be involved.

The full breakdown is here: https://www.technadu.com/whatsapp-vbscript-campaign-installs-manageengine-rmm-kaspersky-warns/629801/

Curious how people here view this trend. Are messaging platforms becoming a more effective malware delivery channel than email for certain targets, especially as users get better at spotting traditional phishing attempts?