Brazil WhatsApp malware attacks target cryptocurrency wallets and bank accounts

According to a report by Cointelegraph, Trustwave's cybersecurity research team SpiderLabs has released a new report indicating that a banking Trojan named "Eternidade Stealer" is spreading widely in Brazil via WhatsApp.

Attackers use social engineering tactics such as fake government program notifications, delivery messages, and investment groups to lure users into clicking malicious links. Once clicked, the malware simultaneously infects the device and hijacks the WhatsApp account, automatically spreading to the victim's contact list. The Trojan is capable of scanning and stealing login credentials from multiple Brazilian banks, fintech companies, and cryptocurrency exchanges. To avoid detection, the malware uses a preset Gmail account to receive commands instead of a fixed server address. Security experts advise users to remain vigilant about any links, even if they come from trusted contacts, and to keep their software updated to prevent such attacks.