Don't open that WhatsApp message, Microsoft warns
… "Notably, these renamed binaries retain their original PE Portable Executable metadata, including the OriginalFileName field which still identifies them as curl.exe and bitsadmin.exe," Microsoft's researchers wrote in a Tuesday blog. …