WhatsApp malware campaign uses malicious VBS files to gain persistent access