India's I4C (Ministry of Home Affairs) warns of a "Boss Scam" where cybercriminals send malicious ZIP files (like "RBI.zip" or "Statement of Account.zip") via WhatsApp, SMS, and email disguised as official documents.
Opening these files compromises computers and WhatsApp sessions, which attackers then use to impersonate senior executives and instruct finance employees to transfer money to fraudulent accounts.
Countermeasures include verifying unexpected requests through a second channel, never opening unknown attachments, enabling MFA, and reporting suspicious activity to IT immediately.
Remember: STOP → CHECK → VERIFY → THEN OPEN—cybersecurity is everyone's responsibility.