Astaroth banking malware returns with WhatsApp

Back Siliconangle

Astaroth banking malware returns with WhatsApp

Siliconangle • January 8, 2026

Share: View original

... malware that's weaponizing WhatsApp as an automated infection vector aimed at Brazilian users. Dubbed “Boto-Cor-de-Rosa,” the new campaign ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Astaroth Banking Malware Campaign Targets Brazilian Users via WhatsApp The Astaroth banking malware has resurfaced, utilizing WhatsApp as an automated infection vector specifically targeting Brazilian users. This new campaign is referred to as 'Boto Cor-de-Rosa' and has been identified by the Acronis Threat Research Unit. 2 sources 45

Extracted Entities

Attack Types (1)

Campaigns (1)

Boto-Cor-de-Rosa

Malware (1)

Platforms (1)