WhatsApp 'Eternidade' Trojan Self-Propagates Through Brazil
ID: 173512fb-da08-559a-8b41-46d3c2737fbd
STIX ID: report--173512fb-da08-559a-8b41-46d3c2737fbd
Feed Name: Dark Reading
Threat Score
Eternidade is a two-part cybercrime campaign active in Brazil: a WhatsApp-spreading worm that selectively messages personal contacts and a Delphi-written trojan stealer that verifies victims (Brazilian Portuguese OS, not corporate/sandbox) and harvests banking and crypto credentials via overlays and exfiltration; the malware also includes resilient C2 mechanisms (email-driven C2 updates) and has been observed on roughly 10,000 infected systems.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
