A WhatsApp bug lets malicious media files spread through group chats