Visual Basic Script (VBScript) is a Windows scripting language commonly abused as a loader or dropper to download and execute malware payloads.
Overview
Visual Basic Script (VBScript) is a Windows scripting language commonly abused as a loader or dropper to download and execute malware payloads. In cybersecurity, VBScript-based campaigns are notable for enabling rapid, sometimes fileless, payload delivery and versatile infection chains. The referenced article describes a WhatsApp worm used to deploy the Astaroth banking trojan, illustrating how script-driven delivery techniques can propagate credential-stealing malware via a popular messaging platform.
Related Threat Clusters
-
WhatsApp Exploit Used to Distribute Astaroth Banking Trojan in Brazil
Attackers have compromised Brazilian users through WhatsApp by distributing a malicious ZIP file containing a Visual Basic script that installs the Astaroth banking trojan. This campaign, named Boto-Cor-de-Rosa,…
2 articles · Updated January 9, 2026
Recent Intelligence Reports
- WhatsApp worm harnessed to deploy Astaroth banking trojan — Scworld · January 9, 2026