They lost me at "encrypted downloader". The WhatsApp video attachment format allows for...a downloader? I strongly doubt that.

Perhaps what they should have written is that they cannot decrypt the video and thus check for an exploit within it (it's commonly called payload, because it doesn't have to be a downloader...).

I see from other comments here that I am not the only one doubting the report wording at the very least.