Brazil WhatsApp malware attacks target cryptocurrency wallets and bank accounts

According to Cointelegraph, Trustwave's cybersecurity research team SpiderLabs reported that a banking Trojan named "Eternidade Stealer" is spreading widely in Brazil through WhatsApp.

Attackers use social engineering tactics such as fake government program notifications, courier messages, and investment groups to lure users into clicking malicious links. Once clicked, the malware simultaneously infects the device and hijacks the WhatsApp account, automatically spreading to the victim's list. The Trojan is capable of scanning and stealing login credentials from multiple Brazilian banks, fintech companies, and cryptocurrency exchanges. To avoid detection, the malware uses a preset Gmail account to receive commands instead of a fixed server address. Security experts advise users to remain vigilant any links, even those from trusted contacts, and to keep software updated to prevent such attacks.