Thehackernews WhatsApp Worm Distributes Astaroth Banking Trojan in Brazil
Article Content
Browse articles 
A new cyberattack has emerged in Brazil, where a WhatsApp worm is spreading the Astaroth banking Trojan. This attack leverages trusted tools and workflows to bypass traditional security defenses, highlighting the need for Zero Trust and AI-powered cloud security solutions to mitigate such threats.
Ask AI about this cluster
Answers cite the sources they use
Updated 196d ago How this analysis works
More articles in this cluster (1)
Following this threat?
Track Astaroth in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Guildma (Astaroth) Malware Infection via Geofenced Brazilian Email On August 31, 2026, a Windows host was infected with Guildma (Astaroth) malware through a malicious email targeting Brazilian users. The email contained a geofenced link that delivered a ZIP archive with a Windows shortcut, which downloaded content into an alternate data stream in the Temp directory. The malware… 
Critical Zero-Day Vulnerability in F5 BIG-IP APM Exploited for Remote Code Execution F5 Networks has reported a critical vulnerability in its BIG-IP Access Policy Manager (APM), tracked as CVE-2026-94127, which is being actively exploited in the wild. The flaw allows unauthenticated attackers to execute remote code on systems configured with both an APM access policy and an OAuth profile. This…