According to a report from Cointelegraph on November 20, Deep Tide TechFlow news states that Trustwave's cybersecurity research team SpiderLabs has reported that a banking Trojan called “Eternidade Stealer” is being widely spread in Brazil via WhatsApp. Attackers are using social engineering tactics such as fake government program notifications, delivery messages, and investment groups to lure users into clicking on malicious links.
Once clicked, the malware will simultaneously infect the device and hijack the WhatsApp account, automatically spreading to the victim's contact list. This Trojan is capable of scanning and stealing login credentials from multiple banks, fintech companies, and cryptocurrency exchanges in Brazil.
To avoid detection, this malware uses preset Gmail accounts to receive instructions instead of a fixed server address. Security experts recommend that users remain vigilant about any link, even if it comes from a trusted contact, and keep their software updated to guard against such attacks.
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
Brazil WhatsApp malware attacks target encryption wallets and bank accounts
According to a report from Cointelegraph on November 20, Deep Tide TechFlow news states that Trustwave's cybersecurity research team SpiderLabs has reported that a banking Trojan called “Eternidade Stealer” is being widely spread in Brazil via WhatsApp. Attackers are using social engineering tactics such as fake government program notifications, delivery messages, and investment groups to lure users into clicking on malicious links.
Once clicked, the malware will simultaneously infect the device and hijack the WhatsApp account, automatically spreading to the victim's contact list. This Trojan is capable of scanning and stealing login credentials from multiple banks, fintech companies, and cryptocurrency exchanges in Brazil.
To avoid detection, this malware uses preset Gmail accounts to receive instructions instead of a fixed server address. Security experts recommend that users remain vigilant about any link, even if it comes from a trusted contact, and keep their software updated to guard against such attacks.