logo

Self-Propagating WhatsApp Malware Targets Brazilian Users with Rapid Spread

ID: 00ac17f0-4e78-5a42-83af-479d1a68c897

STIX ID: report--00ac17f0-4e78-5a42-83af-479d1a68c897

Feed Name: Zimperium Blog

Threat Score
70/100

Date Published: 2025-10-17

Date Updated: 2026-05-01

...
...

A research brief describes a new Windows malware campaign called SORVEPOTEL that autonomously spreads by hijacking active WhatsApp Web sessions and sending infected ZIP files to the contacts of compromised accounts; the malware then deploys payloads aimed at financial institutions and cryptocurrency platforms.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.