Astaroth banking malware leverages WhatsApp Web for distribution

Back Broadcom

Astaroth banking malware leverages WhatsApp Web for distribution

Broadcom • January 9, 2026

Share: View original

Acronis Threat Research Unit has identified a new campaign of the Brazilian banking malware Astaroth dubbed "Boto Cor-de-Rosa.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Astaroth Banking Malware Campaign Targets Brazilian Users via WhatsApp The Astaroth banking malware has resurfaced, utilizing WhatsApp as an automated infection vector specifically targeting Brazilian users. This new campaign is referred to as 'Boto Cor-de-Rosa' and has been identified by the Acronis Threat Research Unit. 2 sources 45

Extracted Entities

Attack Types (1)

Campaigns (1)

Boto Cor-de-Rosa

Malware (1)

Tools (1)