WhatsApp Worm Targets Brazilian Crypto Wallets and Bank Accounts

Citing HashNews, a sophisticated cyberattack is targeting Brazilian cryptocurrency holders and bank users through WhatsApp. The attack involves a worm and a banking trojan called 'Eternidade Stealer,' which spreads via social engineering messages, including fake government notices, delivery alerts, and investment group invitations. Once a user clicks on the malicious link, both the worm and trojan infect the device. The worm steals contact lists and uses 'smart filtering' to target contacts, while the trojan automatically downloads and scans financial data from Brazilian banks, fintechs, and crypto platforms. The malware evades detection by receiving new commands through a pre-set Gmail account. Users are advised to avoid clicking on suspicious links, verify links through other apps, keep software updated, and use antivirus tools. If compromised, users should freeze all financial access and track fund movements to assist authorities.