A familiar name on WhatsApp doesn’t guarantee the attachment is safe.