Boto-Cor-de-Rosa

Campaign

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

January 8, 2026

Last Seen

January 10, 2026

Boto-Cor-de-Rosa is a threat campaign that uses WhatsApp as the delivery vector for the Astaroth Android banking trojan.

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (3)

WhatsApp Exploit Used to Distribute Astaroth Banking Trojan in Brazil

Jan 9·2 sources

Astaroth Trojan Reemerges as Boto-Cor-de-Rosa via WhatsApp in Brazil

Jan 10·1 sources

Astaroth Banking Malware Campaign Targets Brazilian Users via WhatsApp

Jan 9·2 sources

Related Articles (3)

Astaroth Trojan Reemerges as Boto-Cor-de-Rosa, Spreads via WhatsApp in Brazil

Webpronews·Jan 10

Boto-Cor-de-Rosa campaign reveals Astaroth WhatsApp

Astaroth banking malware returns with WhatsApp

Siliconangle·Jan 8

Related Entities

Malware Worm Trojan Astaroth Campaign Pink Dolphin Brazil Financial Astaroth WhatsApp Windows Python WhatsApp Web