Brazil Hit by Banking Trojan Spread via WhatsApp Worm and RelayNFC NFC Relay Fraud
Water Saci adopted a layered HTA/PDF infection chain and a Python-based WhatsApp Web worm to deliver a banking trojan and harvest sensitive data in Brazil.
Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices
A WhatsApp-worm campaign in Brazil delivers a Delphi-based banking trojan, Eternidade Stealer, using IMAP-updated C2s and a Python WhatsApp hijacking script.