WhatsApp Worm Spreads Astaroth Banking Trojan Across Brazil via Contact Auto-Messaging
Cybersecurity experts have revealed information on a new campaign that targets Brazil by using WhatsApp as a distribution vector for the Astaroth Windows banking trojan.
The Acronis Threat Research Unit has given the campaign the code name Boto Cor-de-Rosa.
According to a report sent to The Hacker News by the cybersecurity business, the malware obtains the victim's WhatsApp contact list and automatically sends malicious messages to each contact in order to propagate the infection.
The recently introduced WhatsApp-based worm module is fully developed in Python, demonstrating the threat actors' increasing usage of multi-language modular components, even though the core Astaroth payload is still written in Delphi and its installer uses Visual Basic script read more about WhatsApp Wo...