Brazil WhatsApp Malware Targets Crypto Wallets and Bank Accounts

Derived from TechFlow, a new banking trojan named 'Eternidade Stealer' is spreading widely in Brazil via WhatsApp. According to a report by Trustwave's SpiderLabs, attackers use social engineering tactics such as fake government notifications, delivery messages, and investment group links to lure users into clicking malicious links. Once clicked, the malware infects devices, hijacks WhatsApp accounts, and automatically propagates to victims' contact lists. It can steal login credentials from multiple Brazilian banks, fintech companies, and cryptocurrency exchanges. To avoid detection, the malware uses preset Gmail accounts to receive commands instead of fixed server addresses. Security experts advise users to remain cautious of all links, even from trusted contacts, and to keep software updated to prevent such attacks.