Acronis WhatsApp Exploit Used to Distribute Astaroth Banking Trojan in Brazil
Article Content
Browse articles 
Attackers have compromised Brazilian users through WhatsApp by distributing a malicious ZIP file containing a Visual Basic script that installs the Astaroth banking trojan. This campaign, named Boto-Cor-de-Rosa, utilizes a Python-based propagation module and initiates the infection when victims open the disguised script within the ZIP archive.
Ask AI about this cluster
Answers cite the sources they use
Updated 241d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track Astaroth in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed