Water Saci — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
November 12, 2025
Last Seen
December 4, 2025

Related Threat Clusters

  • WhatsApp Malware Campaign Targets Brazilian Crypto Users

    A sophisticated malware campaign in Brazil is exploiting WhatsApp to target cryptocurrency users, deploying a banking trojan named 'Eternidade Stealer.' This malware hijacks devices, steals financial data, and spreads…

    19 articles · Updated November 26, 2025
  • WhatsApp Security Flaw Exposes 3.5 Billion Phone Numbers

    A security flaw in WhatsApp allowed researchers to extract phone numbers of 3.5 billion users. The exploit involved systematically checking numbers through the app's discovery feature, revealing profile photos for 57%…

    56 articles · Updated November 18, 2025
  • Maverick Malware Targets WhatsApp Web Users in Brazil

    Maverick malware is a banking trojan that specifically targets WhatsApp Web users in Brazil, aiming to hijack accounts and steal credentials from Latin American financial institutions. It propagates through malicious…

    2 articles · Updated November 12, 2025
  • Water Saci Threat Evolves with AI and Multi-Format Malware via WhatsApp

    The Water Saci threat operation has advanced its tactics by using WhatsApp to distribute malicious HTML Application files and PDFs targeting Brazilian users. Attackers are leveraging AI for code conversion and employing…

    2 articles · Updated December 4, 2025

Recent Intelligence Reports

  • More sophisticated Water Saci attack methods uncovered — Scworld · December 4, 2025
  • Brazil Alerts Crypto Users to New WhatsApp Malware Campaign Deploying Hijacking Worm — Coinedition · November 21, 2025
  • Maverick Malware May Hijack WhatsApp Web Accounts Targeting Brazil — Bitget · November 12, 2025
  • Maverick Malware May Hijack WhatsApp Web Accounts Targeting Brazil — Bitget · November 12, 2025

CVSS v3.1 Breakdown