Attackers could have inserted malicious links into chats to spread malware, among other possibilities.