CERT-In has alerted users about a malware campaign spreading via WhatsApp through fake invoices and bank statements, urging caution with unexpected attachments.